The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-staticUpgrade glibc-langpack-nsoUpgrade glibc-langpack-daUpgrade glibc-langpack-kmUpgrade glibc-utilsUpgrade glibc-langpack-idUpgrade glibc-langpack-myUpgrade glibc-langpack-sqUpgrade nss_nisUpgrade nss_dbUpgrade glibc-langpack-niuUpgrade glibc-langpack-furUpgrade glibc-langpack-yoUpgrade glibc-langpack-frUpgrade glibc-langpack-psUpgrade glibc-langpack-msUpgrade glibc-langpack-maiUpgrade glibc-langpack-kaUpgrade glibc-langpack-asUpgrade glibc-langpack-cmnUpgrade glibc-headersUpgrade glibc-langpack-lnUpgrade glibc-langpack-ikUpgrade glibc-langpack-koUpgrade glibc-langpack-lzhUpgrade glibc-langpack-rajUpgrade glibc-langpack-arUpgrade glibc-langpack-scUpgrade glibc-langpack-etUpgrade glibc-langpack-gvUpgrade glibc-langpack-nbUpgrade nss_hesiodUpgrade glibc-langpack-srUpgrade glibc-langpack-hiUpgrade glibc-langpack-anUpgrade glibc-langpack-glUpgrade glibc-langpack-klUpgrade glibc-langpack-gdUpgrade nscdUpgrade glibc-langpack-ocUpgrade glibc-langpack-neUpgrade glibc-langpack-yueUpgrade glibc-langpack-tgUpgrade glibc-langpack-astUpgrade glibc-langpack-magUpgrade glibc-langpack-heUpgrade glibc-langpack-paUpgrade glibc-langpack-quzUpgrade glibc-langpack-ksUpgrade glibc-langpack-mkUpgrade glibc-langpack-liUpgrade glibc-langpack-beUpgrade glibc-langpack-slUpgrade glibc-langpack-trUpgrade glibc-langpack-filUpgrade glibc-langpack-fiUpgrade glibc-langpack-bgUpgrade glibc-langpack-kwUpgrade glibc-langpack-htUpgrade glibc-langpack-ugUpgrade glibc-langpack-isUpgrade glibc-langpack-viUpgrade glibc-langpack-waUpgrade glibc-langpack-veUpgrade glibc-langpack-plUpgrade glibc-langpack-soUpgrade glibc-langpack-taUpgrade glibc-langpack-ceUpgrade glibc-langpack-satUpgrade glibc-langpack-chrUpgrade glibc-langpack-omUpgrade libcrypt-nssUpgrade glibc-debuginfoUpgrade glibc-locale-sourceUpgrade glibc-langpack-afUpgrade glibc-langpack-bnUpgrade glibc-langpack-ltUpgrade glibc-langpack-tiUpgrade glibc-langpack-knUpgrade glibc-langpack-dvUpgrade glibc-langpack-esUpgrade glibc-langpack-iaUpgrade glibc-langpack-tlUpgrade glibc-langpack-walUpgrade glibc-langpack-nhnUpgrade glibc-langpack-crhUpgrade glibc-langpack-swUpgrade glibc-langpack-doiUpgrade glibc-langpack-bsUpgrade glibc-langpack-papUpgrade glibc-langpack-thUpgrade glibc-langpack-amUpgrade glibc-langpack-rwUpgrade glibc-langpack-mniUpgrade glibc-langpack-svUpgrade glibc-langpack-mnUpgrade glibc-langpack-siUpgrade glibc-langpack-loUpgrade glibc-langpack-ffUpgrade glibc-langpack-shsUpgrade glibc-langpack-deUpgrade glibc-langpack-csUpgrade glibc-nss-develUpgrade glibc-langpack-nanUpgrade glibc-langpack-igUpgrade glibc-langpack-ssUpgrade glibc-langpack-elUpgrade glibc-langpack-ptUpgrade glibc-langpack-mhrUpgrade glibc-commonUpgrade glibc-langpack-xhUpgrade glibc-langpack-itUpgrade glibc-langpack-hsbUpgrade glibc-langpack-skUpgrade glibc-langpack-zuUpgrade glibc-langpack-caUpgrade glibc-langpack-dzUpgrade glibc-langpack-tcyUpgrade glibc-langpack-hakUpgrade glibc-langpack-akUpgrade glibc-langpack-iuUpgrade glibc-langpack-ruUpgrade glibc-langpack-sdUpgrade glibc-langpack-anpUpgrade glibc-langpack-roUpgrade glibc-langpack-nrUpgrade glibc-langpack-ukUpgrade glibc-langpack-nnUpgrade glibc-langpack-guUpgrade glibc-langpack-bhbUpgrade glibc-langpack-mtUpgrade glibc-langpack-osUpgrade glibc-langpack-brUpgrade glibc-langpack-mrUpgrade glibc-langpack-eoUpgrade glibc-develUpgrade glibc-langpack-berUpgrade glibc-all-langpacksUpgrade glibc-langpack-lijUpgrade glibc-langpack-urUpgrade glibc-langpack-mlUpgrade glibc-langpack-miUpgrade glibcUpgrade glibc-langpack-teUpgrade glibc-langpack-uzUpgrade glibc-benchtestsUpgrade glibc-langpack-woUpgrade glibc-langpack-saUpgrade glibc-langpack-lbUpgrade glibc-langpack-huUpgrade glibc-langpack-szlUpgrade glibc-langpack-ndsUpgrade glibc-langpack-cvUpgrade glibc-langpack-kuUpgrade glibc-langpack-theUpgrade glibc-langpack-cyUpgrade glibc-langpack-csbUpgrade glibc-langpack-mgUpgrade glibc-langpack-gaUpgrade glibc-langpack-aaUpgrade glibc-langpack-tsUpgrade glibc-langpack-orUpgrade glibc-langpack-hyUpgrade glibc-langpack-stUpgrade glibc-langpack-lgUpgrade libcryptUpgrade glibc-langpack-fyUpgrade glibc-langpack-kkUpgrade glibc-langpack-lvUpgrade glibc-langpack-unmUpgrade glibc-langpack-waeUpgrade glibc-langpack-haUpgrade glibc-langpack-faUpgrade glibc-langpack-hneUpgrade glibc-langpack-sgsUpgrade glibc-langpack-euUpgrade glibc-langpack-tnUpgrade glibc-langpack-sidUpgrade glibc-langpack-hrUpgrade glibc-langpack-ttUpgrade glibc-langpack-bhoUpgrade glibc-langpack-aycUpgrade glibc-langpack-bynUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-tkUpgrade glibc-langpack-boUpgrade glibc-langpack-bemUpgrade glibc-langpack-azUpgrade glibc-minimal-langpackUpgrade glibc-langpack-tigUpgrade glibc-langpack-enUpgrade glibc-langpack-yiUpgrade glibc-langpack-seUpgrade glibc-langpack-kokUpgrade glibc-langpack-kyUpgrade glibc-langpack-brxUpgrade glibc-langpack-jaUpgrade glibc-langpack-zhUpgrade glibc-langpack-nlUpgrade glibc-langpack-gezUpgrade glibc-langpack-fo | Apr 27, 2020 | Oct 20, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 20, 2017 |
| Centos_linux | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscd | Aug 28, 2019 | Oct 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 20, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade nscdUpgrade glibc | Nov 30, 2017 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-staticUpgrade glibcUpgrade glibc-devel | Nov 30, 2017 | Oct 20, 2017 |
| Oracle_linux | — | Upgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade glibcUpgrade glibc-devel | Apr 19, 2018 | Oct 19, 2017 |
| Redhat_linux | — | Upgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-debuginfoNo solution existsUpgrade glibc-staticUpgrade glibcUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade nscd | Apr 11, 2018 | Oct 20, 2017 |
| Suse | — | Upgrade glibc-localeUpgrade glibc-langUpgrade glibc-develUpgrade glibcUpgrade glibc-devel-staticUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-htmlUpgrade glibc-i18ndataUpgrade glibc-utilsUpgrade glibc-locale-x86Upgrade glibc-profile-x86Upgrade glibc-locale-32bitUpgrade glibc-profile-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-profileUpgrade glibc-extraUpgrade glibc-x86Upgrade nscdUpgrade glibc-32bitUpgrade glibc-info | Jan 13, 2018 | Oct 20, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub