The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-bhbUpgrade glibc-langpack-lgUpgrade glibc-langpack-hyUpgrade glibc-langpack-aycUpgrade glibc-langpack-hrUpgrade glibc-commonUpgrade glibc-langpack-urUpgrade glibc-langpack-igUpgrade glibc-langpack-haUpgrade glibc-langpack-osUpgrade glibc-langpack-siUpgrade glibc-langpack-csUpgrade glibc-langpack-mtUpgrade glibc-langpack-eoUpgrade glibc-langpack-saUpgrade glibc-langpack-jaUpgrade glibc-langpack-kyUpgrade glibc-langpack-shsUpgrade glibc-langpack-guUpgrade glibc-langpack-berUpgrade glibc-langpack-brUpgrade glibc-langpack-euUpgrade glibc-langpack-mlUpgrade glibcUpgrade glibc-langpack-bhoUpgrade glibc-langpack-kkUpgrade glibc-langpack-hneUpgrade glibc-nss-develUpgrade glibc-langpack-lvUpgrade glibc-langpack-faUpgrade glibc-langpack-nlUpgrade glibc-langpack-ptUpgrade glibc-minimal-langpackUpgrade glibc-langpack-orUpgrade glibc-langpack-mgUpgrade glibc-benchtestsUpgrade glibc-langpack-sidUpgrade glibc-langpack-cyUpgrade glibc-langpack-stUpgrade glibc-langpack-azUpgrade glibc-langpack-seUpgrade glibc-langpack-uzUpgrade glibc-langpack-lijUpgrade glibc-langpack-miUpgrade glibc-langpack-gezUpgrade glibc-langpack-waeUpgrade glibc-langpack-unmUpgrade glibc-langpack-elUpgrade glibc-langpack-deUpgrade glibc-langpack-ssUpgrade glibc-langpack-bemUpgrade glibc-langpack-tsUpgrade glibc-langpack-szlUpgrade glibc-langpack-yiUpgrade glibc-langpack-anpUpgrade glibc-langpack-csbUpgrade glibc-langpack-iuUpgrade glibc-langpack-aaUpgrade glibc-langpack-sgsUpgrade glibc-langpack-kokUpgrade glibc-langpack-tcyUpgrade glibc-langpack-cvUpgrade glibc-langpack-xhUpgrade glibc-langpack-mrUpgrade glibc-langpack-tkUpgrade glibc-langpack-dzUpgrade glibc-langpack-akUpgrade glibc-langpack-itUpgrade glibc-langpack-caUpgrade glibc-langpack-huUpgrade glibc-langpack-sdUpgrade glibc-langpack-zuUpgrade glibc-langpack-ruUpgrade glibc-langpack-roUpgrade glibc-langpack-nrUpgrade glibc-langpack-ndsUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ffUpgrade glibc-langpack-skUpgrade glibc-langpack-brxUpgrade glibc-langpack-woUpgrade glibc-langpack-ukUpgrade glibc-langpack-theUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-gaUpgrade glibc-langpack-ttUpgrade glibc-langpack-hsbUpgrade glibc-langpack-hakUpgrade glibc-langpack-kuUpgrade glibc-langpack-lbUpgrade glibc-langpack-enUpgrade glibc-langpack-loUpgrade glibc-langpack-nnUpgrade glibc-all-langpacksUpgrade glibc-langpack-tigUpgrade glibc-langpack-bynUpgrade glibc-langpack-teUpgrade libcryptUpgrade glibc-langpack-fyUpgrade glibc-langpack-zhUpgrade glibc-langpack-tnUpgrade glibc-langpack-nanUpgrade glibc-langpack-boUpgrade glibc-langpack-foUpgrade glibc-develUpgrade glibc-langpack-mnUpgrade glibc-langpack-lzhUpgrade glibc-debuginfoUpgrade glibc-langpack-idUpgrade glibc-langpack-kmUpgrade glibc-langpack-esUpgrade glibc-langpack-arUpgrade glibc-langpack-daUpgrade glibc-staticUpgrade glibc-langpack-nsoUpgrade glibc-langpack-satUpgrade glibc-langpack-mkUpgrade glibc-langpack-glUpgrade glibc-langpack-kaUpgrade glibc-langpack-kwUpgrade glibc-langpack-nbUpgrade glibc-langpack-neUpgrade glibc-langpack-lnUpgrade glibc-langpack-rajUpgrade glibc-langpack-gdUpgrade glibc-langpack-etUpgrade nss_hesiodUpgrade glibc-langpack-cmnUpgrade glibc-langpack-srUpgrade glibc-langpack-maiUpgrade glibc-langpack-svUpgrade glibc-utilsUpgrade glibc-langpack-ltUpgrade glibc-langpack-bsUpgrade glibc-langpack-papUpgrade glibc-langpack-koUpgrade nscdUpgrade glibc-langpack-waUpgrade glibc-langpack-ugUpgrade glibc-langpack-scUpgrade glibc-langpack-ksUpgrade glibc-langpack-isUpgrade glibc-langpack-astUpgrade glibc-langpack-tgUpgrade glibc-langpack-ocUpgrade glibc-langpack-afUpgrade glibc-langpack-chrUpgrade glibc-langpack-crhUpgrade glibc-langpack-ceUpgrade glibc-langpack-bgUpgrade glibc-langpack-paUpgrade glibc-langpack-dvUpgrade glibc-langpack-anUpgrade glibc-langpack-swUpgrade glibc-langpack-soUpgrade glibc-langpack-plUpgrade glibc-langpack-nhnUpgrade glibc-langpack-knUpgrade glibc-langpack-rwUpgrade glibc-langpack-heUpgrade glibc-langpack-taUpgrade glibc-langpack-veUpgrade glibc-langpack-iaUpgrade glibc-langpack-gvUpgrade glibc-langpack-fiUpgrade glibc-langpack-doiUpgrade glibc-langpack-hiUpgrade glibc-langpack-frUpgrade glibc-langpack-furUpgrade glibc-langpack-niuUpgrade glibc-langpack-msUpgrade glibc-langpack-asUpgrade glibc-headersUpgrade nss_nisUpgrade glibc-langpack-psUpgrade glibc-langpack-yoUpgrade nss_dbUpgrade glibc-langpack-sqUpgrade glibc-langpack-ikUpgrade glibc-langpack-htUpgrade glibc-langpack-beUpgrade glibc-langpack-filUpgrade glibc-langpack-magUpgrade glibc-langpack-yueUpgrade glibc-locale-sourceUpgrade glibc-langpack-trUpgrade glibc-langpack-slUpgrade glibc-langpack-quzUpgrade glibc-langpack-liUpgrade glibc-langpack-bnUpgrade glibc-langpack-omUpgrade glibc-langpack-klUpgrade glibc-langpack-walUpgrade glibc-langpack-mniUpgrade glibc-langpack-thUpgrade glibc-langpack-viUpgrade libcrypt-nssUpgrade glibc-langpack-amUpgrade glibc-langpack-tlUpgrade glibc-langpack-tiUpgrade glibc-langpack-my | Apr 27, 2020 | Oct 20, 2017 |
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Oct 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 20, 2017 |
| Centos_linux | — | Upgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-devel | Aug 28, 2019 | Oct 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Oct 20, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-devel | Nov 30, 2017 | Oct 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-common | Nov 30, 2017 | Oct 20, 2017 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibc-staticUpgrade nscdUpgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-common | Apr 19, 2018 | Oct 19, 2017 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscdUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-staticNo solution existsUpgrade glibc-utils | Apr 11, 2018 | Oct 20, 2017 |
| Suse | — | Upgrade glibc-i18ndataUpgrade glibc-htmlUpgrade glibc-langUpgrade glibc-utilsUpgrade glibc-locale-baseUpgrade glibcUpgrade glibc-localeUpgrade glibc-devel-32bitUpgrade glibc-locale-x86Upgrade glibc-develUpgrade glibc-devel-staticUpgrade glibc-profile-x86Upgrade nscdUpgrade glibc-infoUpgrade glibc-locale-32bitUpgrade glibc-32bitUpgrade glibc-profileUpgrade glibc-x86Upgrade glibc-extraUpgrade glibc-profile-32bitUpgrade glibc-locale-base-32bit | Jan 13, 2018 | Oct 20, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Oct 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub