The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-mniUpgrade glibc-langpack-omUpgrade glibc-langpack-waUpgrade glibc-langpack-ugUpgrade glibc-langpack-heUpgrade glibc-langpack-tgUpgrade glibc-langpack-isUpgrade glibc-langpack-mkUpgrade glibc-langpack-kaUpgrade glibc-langpack-neUpgrade glibc-langpack-svUpgrade glibc-langpack-veUpgrade glibc-langpack-walUpgrade glibc-langpack-thUpgrade glibc-langpack-doiUpgrade glibc-langpack-papUpgrade glibc-langpack-scUpgrade glibc-langpack-viUpgrade glibc-langpack-beUpgrade glibc-langpack-yueUpgrade glibc-utilsUpgrade glibc-langpack-koUpgrade glibc-langpack-maiUpgrade glibc-langpack-klUpgrade libcrypt-nssUpgrade glibc-locale-sourceUpgrade glibc-langpack-iaUpgrade glibc-langpack-rajUpgrade glibc-langpack-liUpgrade glibc-langpack-magUpgrade glibc-langpack-filUpgrade glibc-langpack-quzUpgrade glibc-langpack-slUpgrade glibc-langpack-htUpgrade glibc-langpack-bnUpgrade glibc-langpack-trUpgrade glibc-staticUpgrade glibc-langpack-ikUpgrade glibc-langpack-lnUpgrade glibc-langpack-kmUpgrade glibc-langpack-nsoUpgrade glibc-langpack-esUpgrade nscdUpgrade glibc-langpack-hiUpgrade glibc-langpack-daUpgrade glibc-langpack-tiUpgrade glibc-langpack-astUpgrade glibc-langpack-mnUpgrade glibc-langpack-knUpgrade glibc-langpack-swUpgrade glibc-langpack-amUpgrade glibc-langpack-fiUpgrade glibc-debuginfoUpgrade glibc-langpack-gdUpgrade nss_hesiodUpgrade glibc-langpack-kwUpgrade glibc-langpack-arUpgrade glibc-langpack-ocUpgrade glibc-langpack-glUpgrade glibc-langpack-nbUpgrade glibc-langpack-cmnUpgrade glibc-langpack-myUpgrade glibc-langpack-satUpgrade glibc-langpack-anUpgrade glibc-langpack-paUpgrade glibc-langpack-lzhUpgrade glibc-langpack-idUpgrade glibc-langpack-gvUpgrade glibc-langpack-bgUpgrade glibc-langpack-taUpgrade glibc-langpack-afUpgrade glibc-langpack-dvUpgrade glibc-langpack-srUpgrade glibc-langpack-crhUpgrade glibc-langpack-ceUpgrade glibc-langpack-tlUpgrade glibc-langpack-rwUpgrade glibc-langpack-soUpgrade glibc-langpack-nhnUpgrade glibc-langpack-ksUpgrade glibc-langpack-bsUpgrade nss_dbUpgrade glibc-langpack-furUpgrade nss_nisUpgrade glibc-headersUpgrade glibc-langpack-psUpgrade glibc-langpack-niuUpgrade glibc-langpack-msUpgrade glibc-langpack-yoUpgrade glibc-langpack-frUpgrade glibc-langpack-sqUpgrade glibc-langpack-chrUpgrade glibc-langpack-etUpgrade glibc-langpack-plUpgrade glibc-langpack-ltUpgrade glibc-langpack-asUpgrade glibc-langpack-ruUpgrade glibc-langpack-hakUpgrade glibc-langpack-theUpgrade glibc-langpack-ukUpgrade glibc-langpack-tsUpgrade glibc-langpack-szlUpgrade glibc-langpack-stUpgrade glibc-langpack-mgUpgrade glibc-langpack-orUpgrade glibc-langpack-lbUpgrade glibc-langpack-anpUpgrade glibc-langpack-jaUpgrade glibc-langpack-saUpgrade glibc-langpack-woUpgrade glibc-langpack-brxUpgrade glibc-langpack-mrUpgrade glibc-langpack-guUpgrade glibc-langpack-kyUpgrade glibc-develUpgrade glibc-langpack-enUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-boUpgrade glibc-langpack-azUpgrade glibc-langpack-aycUpgrade glibc-minimal-langpackUpgrade glibc-langpack-huUpgrade glibc-langpack-nrUpgrade glibc-langpack-akUpgrade glibc-langpack-tkUpgrade glibc-langpack-zuUpgrade glibc-langpack-tigUpgrade glibc-langpack-bemUpgrade glibc-langpack-roUpgrade glibc-langpack-mhrUpgrade glibc-langpack-itUpgrade glibc-langpack-hsbUpgrade glibc-langpack-dzUpgrade glibc-langpack-caUpgrade glibc-langpack-ndsUpgrade glibc-langpack-sdUpgrade glibc-langpack-osUpgrade glibc-langpack-csUpgrade glibc-langpack-tnUpgrade glibc-langpack-sgsUpgrade glibc-langpack-mtUpgrade glibc-langpack-zhUpgrade glibc-langpack-siUpgrade glibc-langpack-bhbUpgrade glibc-langpack-igUpgrade glibc-langpack-teUpgrade glibc-langpack-nanUpgrade glibc-langpack-mlUpgrade glibc-langpack-miUpgrade glibcUpgrade glibc-langpack-ssUpgrade glibc-all-langpacksUpgrade glibc-langpack-ptUpgrade glibc-langpack-lijUpgrade glibc-langpack-uzUpgrade glibc-nss-develUpgrade glibc-langpack-urUpgrade glibc-langpack-cvUpgrade glibc-commonUpgrade glibc-langpack-hrUpgrade glibc-langpack-kuUpgrade glibc-langpack-fyUpgrade glibc-langpack-ffUpgrade glibc-benchtestsUpgrade glibc-langpack-sidUpgrade glibc-langpack-ttUpgrade glibc-langpack-skUpgrade glibc-langpack-xhUpgrade glibc-langpack-tcyUpgrade glibc-langpack-lgUpgrade glibc-langpack-waeUpgrade glibc-langpack-unmUpgrade glibc-langpack-lvUpgrade glibc-langpack-faUpgrade glibc-langpack-nlUpgrade glibc-langpack-kkUpgrade glibc-langpack-haUpgrade glibc-langpack-gezUpgrade glibc-langpack-foUpgrade glibc-langpack-bhoUpgrade glibc-langpack-elUpgrade glibc-langpack-seUpgrade glibc-langpack-hneUpgrade libcryptUpgrade glibc-langpack-nnUpgrade glibc-langpack-brUpgrade glibc-langpack-loUpgrade glibc-langpack-bynUpgrade glibc-langpack-kokUpgrade glibc-langpack-shsUpgrade glibc-langpack-eoUpgrade glibc-langpack-yiUpgrade glibc-langpack-euUpgrade glibc-langpack-deUpgrade glibc-langpack-berUpgrade glibc-langpack-hyUpgrade glibc-langpack-csbUpgrade glibc-langpack-cyUpgrade glibc-langpack-iuUpgrade glibc-langpack-aaUpgrade glibc-langpack-ga | Apr 27, 2020 | Oct 20, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 20, 2017 |
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscd | Aug 28, 2019 | Oct 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 20, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-utils | Nov 30, 2017 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-staticUpgrade glibcUpgrade glibc-devel | Nov 30, 2017 | Oct 20, 2017 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-utilsUpgrade nscdUpgrade glibc-static | Apr 19, 2018 | Oct 19, 2017 |
| Redhat_linux | — | Upgrade glibc-staticNo solution existsUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibcUpgrade glibc-headersUpgrade glibc-develUpgrade nscdUpgrade glibc-debuginfo-common | Apr 11, 2018 | Oct 20, 2017 |
| Suse | — | Upgrade glibc-locale-base-32bitUpgrade glibc-x86Upgrade glibc-profile-32bitUpgrade nscdUpgrade glibc-infoUpgrade glibc-profile-x86Upgrade glibc-locale-32bitUpgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-profileUpgrade glibc-locale-baseUpgrade glibc-htmlUpgrade glibc-langUpgrade glibc-develUpgrade glibc-localeUpgrade glibc-devel-staticUpgrade glibc-locale-x86Upgrade glibc-utilsUpgrade glibc-i18ndataUpgrade glibcUpgrade glibc-devel-32bit | Jan 13, 2018 | Oct 20, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub