The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-walUpgrade glibc-langpack-nsoUpgrade glibc-langpack-arUpgrade glibc-langpack-doiUpgrade glibc-langpack-ikUpgrade glibc-langpack-tlUpgrade glibc-langpack-amUpgrade glibc-langpack-crhUpgrade nss_dbUpgrade glibc-langpack-chrUpgrade glibc-langpack-furUpgrade glibc-langpack-thUpgrade glibc-langpack-msUpgrade glibc-langpack-sqUpgrade glibc-langpack-yoUpgrade glibc-langpack-papUpgrade glibc-langpack-psUpgrade glibc-langpack-frUpgrade nss_nisUpgrade glibc-headersUpgrade glibc-langpack-idUpgrade glibc-langpack-niuUpgrade glibc-langpack-asUpgrade glibc-langpack-mniUpgrade nss_hesiodUpgrade glibc-langpack-gvUpgrade glibc-langpack-rajUpgrade glibc-langpack-anUpgrade glibc-langpack-cmnUpgrade glibc-langpack-srUpgrade nscdUpgrade glibc-langpack-fiUpgrade glibc-langpack-koUpgrade glibc-langpack-lnUpgrade glibc-langpack-klUpgrade glibc-langpack-nbUpgrade glibc-langpack-iaUpgrade glibc-langpack-lzhUpgrade glibc-langpack-etUpgrade glibc-langpack-ceUpgrade glibc-locale-sourceUpgrade glibc-langpack-neUpgrade glibc-utilsUpgrade glibc-langpack-bsUpgrade glibc-langpack-gdUpgrade glibc-langpack-glUpgrade glibc-langpack-hiUpgrade glibc-langpack-paUpgrade glibc-langpack-dvUpgrade glibc-langpack-satUpgrade libcrypt-nssUpgrade glibc-langpack-afUpgrade glibc-langpack-taUpgrade glibc-langpack-soUpgrade glibc-langpack-scUpgrade glibc-langpack-slUpgrade glibc-langpack-kaUpgrade glibc-langpack-mnUpgrade glibc-langpack-tgUpgrade glibc-langpack-nhnUpgrade glibc-langpack-ugUpgrade glibc-langpack-swUpgrade glibc-langpack-bnUpgrade glibc-langpack-astUpgrade glibc-langpack-beUpgrade glibc-langpack-isUpgrade glibc-langpack-filUpgrade glibc-langpack-htUpgrade glibc-langpack-liUpgrade glibc-langpack-ksUpgrade glibc-debuginfoUpgrade glibc-langpack-trUpgrade glibc-langpack-rwUpgrade glibc-langpack-yueUpgrade glibc-langpack-plUpgrade glibc-langpack-magUpgrade glibc-langpack-quzUpgrade glibc-langpack-mkUpgrade glibc-staticUpgrade glibc-langpack-tiUpgrade glibc-langpack-esUpgrade glibc-langpack-ocUpgrade glibc-langpack-ltUpgrade glibc-langpack-bgUpgrade glibc-langpack-kmUpgrade glibc-langpack-maiUpgrade glibc-langpack-knUpgrade glibc-langpack-omUpgrade glibc-langpack-veUpgrade glibc-langpack-svUpgrade glibc-langpack-heUpgrade glibc-langpack-kwUpgrade glibc-langpack-waUpgrade glibc-langpack-viUpgrade glibc-langpack-daUpgrade glibc-langpack-myUpgrade glibc-langpack-lvUpgrade glibc-langpack-bhoUpgrade glibc-langpack-berUpgrade glibc-langpack-ndsUpgrade glibc-langpack-foUpgrade glibc-langpack-kkUpgrade glibc-langpack-unmUpgrade glibc-langpack-haUpgrade glibc-langpack-seUpgrade glibc-langpack-faUpgrade glibc-langpack-loUpgrade glibc-langpack-tnUpgrade glibc-langpack-siUpgrade glibc-langpack-brUpgrade glibc-langpack-osUpgrade glibc-langpack-mtUpgrade glibc-langpack-mrUpgrade glibc-langpack-euUpgrade glibc-develUpgrade glibc-langpack-eoUpgrade glibc-langpack-bhbUpgrade glibc-langpack-deUpgrade glibc-langpack-shsUpgrade glibc-langpack-guUpgrade glibc-langpack-sgsUpgrade glibc-langpack-zhUpgrade glibc-langpack-woUpgrade glibc-langpack-kyUpgrade glibc-langpack-saUpgrade glibc-langpack-jaUpgrade glibc-langpack-csUpgrade glibc-langpack-ttUpgrade glibc-langpack-tcyUpgrade glibc-langpack-skUpgrade glibc-langpack-cvUpgrade glibc-langpack-lgUpgrade glibc-langpack-ffUpgrade glibc-benchtestsUpgrade glibc-langpack-sidUpgrade glibc-langpack-fyUpgrade glibc-langpack-xhUpgrade glibc-langpack-kuUpgrade glibc-langpack-huUpgrade glibc-langpack-itUpgrade glibc-langpack-hsbUpgrade glibc-langpack-dzUpgrade glibc-langpack-akUpgrade glibc-langpack-caUpgrade glibc-langpack-sdUpgrade glibc-langpack-nrUpgrade glibc-langpack-zuUpgrade glibc-langpack-ruUpgrade glibc-langpack-mhrUpgrade glibc-langpack-uzUpgrade glibc-langpack-igUpgrade glibc-langpack-hakUpgrade glibcUpgrade glibc-langpack-bemUpgrade glibc-all-langpacksUpgrade glibc-langpack-enUpgrade glibc-langpack-aycUpgrade glibc-langpack-tkUpgrade glibc-minimal-langpackUpgrade glibc-langpack-nanUpgrade glibc-langpack-elUpgrade glibc-langpack-brxUpgrade glibc-langpack-teUpgrade glibc-langpack-gezUpgrade glibc-langpack-yiUpgrade glibc-langpack-lijUpgrade glibc-nss-develUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-miUpgrade glibc-langpack-urUpgrade glibc-langpack-kokUpgrade glibc-langpack-waeUpgrade glibc-langpack-tigUpgrade glibc-langpack-boUpgrade glibc-langpack-bynUpgrade glibc-langpack-ssUpgrade glibc-commonUpgrade glibc-langpack-nlUpgrade libcryptUpgrade glibc-langpack-roUpgrade glibc-langpack-ptUpgrade glibc-langpack-azUpgrade glibc-langpack-lbUpgrade glibc-langpack-gaUpgrade glibc-langpack-csbUpgrade glibc-langpack-iuUpgrade glibc-langpack-aaUpgrade glibc-langpack-hyUpgrade glibc-langpack-cyUpgrade glibc-langpack-szlUpgrade glibc-langpack-ukUpgrade glibc-langpack-tsUpgrade glibc-langpack-theUpgrade glibc-langpack-mgUpgrade glibc-langpack-stUpgrade glibc-langpack-orUpgrade glibc-langpack-anpUpgrade glibc-langpack-mlUpgrade glibc-langpack-hrUpgrade glibc-langpack-hneUpgrade glibc-langpack-nn | Apr 27, 2020 | Oct 20, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 20, 2017 |
| Centos_linux | — | Upgrade glibc-staticUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscd | Aug 28, 2019 | Oct 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 20, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-utils | Nov 30, 2017 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-commonUpgrade nscd | Nov 30, 2017 | Oct 20, 2017 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-develUpgrade nscdUpgrade glibc-utilsUpgrade glibc-static | Apr 19, 2018 | Oct 19, 2017 |
| Redhat_linux | — | Upgrade glibc-staticNo solution existsUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscdUpgrade glibc-develUpgrade glibc-headers | Apr 11, 2018 | Oct 20, 2017 |
| Suse | — | Upgrade glibc-locale-baseUpgrade glibc-devel-staticUpgrade glibcUpgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-devel-32bitUpgrade glibc-langUpgrade glibc-localeUpgrade glibc-htmlUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-locale-base-32bitUpgrade glibc-profileUpgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-infoUpgrade glibc-profile-x86Upgrade glibc-profile-32bitUpgrade glibc-x86Upgrade glibc-locale-32bitUpgrade nscd | Jan 13, 2018 | Oct 20, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub