The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade nscdUpgrade glibc-langUpgrade glibc-locale-32bitUpgrade glibc-devel-32bitUpgrade glibcUpgrade glibc-utilsUpgrade glibc-profileUpgrade glibc-devel-staticUpgrade glibc-infoUpgrade glibc-locale-baseUpgrade glibc-extraUpgrade glibc-locale-base-32bitUpgrade glibc-develUpgrade glibc-localeUpgrade glibc-32bitUpgrade glibc-i18ndata | May 19, 2018 | Dec 5, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Dec 5, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 5, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub