An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-gdUpgrade glibc-langpack-plUpgrade glibc-langpack-quzUpgrade glibc-langpack-hsbUpgrade glibc-langpack-viUpgrade glibc-langpack-astUpgrade glibc-langpack-furUpgrade glibc-langpack-slUpgrade glibc-langpack-bemUpgrade glibc-langpack-idUpgrade glibc-langpack-tiUpgrade glibc-utilsUpgrade glibc-langpack-rajUpgrade glibc-langpack-etUpgrade glibc-langpack-nbUpgrade glibc-langpack-dvUpgrade glibc-langpack-woUpgrade glibc-langpack-ocUpgrade glibc-langpack-omUpgrade glibc-langpack-trUpgrade glibc-langpack-hiUpgrade glibc-langpack-lbUpgrade glibc-langpack-nsoUpgrade glibc-langpack-mniUpgrade glibc-langpack-bnUpgrade glibc-langpack-taUpgrade glibc-langpack-liUpgrade glibc-locale-sourceUpgrade glibc-langpack-yueUpgrade glibc-langpack-maiUpgrade glibc-langpack-glUpgrade glibc-langpack-kmUpgrade glibc-langpack-daUpgrade glibc-langpack-kwUpgrade glibc-langpack-myUpgrade glibc-langpack-beUpgrade glibc-langpack-tgUpgrade glibc-langpack-mnUpgrade glibc-langpack-thUpgrade glibc-langpack-soUpgrade glibc-langpack-koUpgrade glibc-langpack-scUpgrade glibc-langpack-osUpgrade glibc-langpack-svUpgrade glibc-debuginfoUpgrade nss_dbUpgrade glibc-langpack-bsUpgrade glibc-langpack-anUpgrade glibc-langpack-ltUpgrade glibc-langpack-bgUpgrade glibc-langpack-satUpgrade glibc-langpack-knUpgrade glibc-langpack-asUpgrade glibc-langpack-fiUpgrade glibc-langpack-filUpgrade glibc-langpack-gvUpgrade glibc-langpack-tlUpgrade glibc-langpack-ugUpgrade glibc-langpack-niuUpgrade libcrypt-nssUpgrade glibc-langpack-ksUpgrade glibc-langpack-crhUpgrade glibc-langpack-huUpgrade glibc-langpack-paUpgrade glibc-langpack-doiUpgrade glibc-langpack-magUpgrade glibc-langpack-htUpgrade glibc-langpack-lzhUpgrade glibc-langpack-arUpgrade glibc-langpack-faUpgrade glibc-langpack-msUpgrade glibc-langpack-azUpgrade glibc-langpack-ceUpgrade glibc-headersUpgrade glibc-langpack-chrUpgrade glibc-langpack-kaUpgrade glibc-staticUpgrade glibc-langpack-ikUpgrade glibc-langpack-neUpgrade glibc-langpack-mkUpgrade glibc-langpack-iaUpgrade glibc-langpack-papUpgrade glibc-langpack-sgsUpgrade nss_nisUpgrade glibc-langpack-sqUpgrade glibc-langpack-veUpgrade glibc-langpack-nhnUpgrade glibc-langpack-frUpgrade nscdUpgrade glibc-langpack-walUpgrade glibc-langpack-ptUpgrade glibc-langpack-srUpgrade glibc-benchtestsUpgrade nss_hesiodUpgrade glibc-langpack-fyUpgrade glibc-langpack-tsUpgrade glibc-langpack-dzUpgrade glibc-langpack-orUpgrade glibc-langpack-mtUpgrade glibc-langpack-csUpgrade glibc-langpack-kkUpgrade glibc-langpack-zuUpgrade glibc-langpack-ndsUpgrade glibc-langpack-loUpgrade glibc-langpack-mgUpgrade glibc-langpack-miUpgrade glibc-langpack-tigUpgrade glibc-langpack-nanUpgrade glibc-langpack-heUpgrade glibc-langpack-anpUpgrade glibc-langpack-berUpgrade glibc-langpack-nrUpgrade glibc-langpack-iuUpgrade glibc-langpack-stUpgrade glibc-develUpgrade glibc-langpack-seUpgrade glibc-langpack-swUpgrade glibc-langpack-hakUpgrade glibc-langpack-waeUpgrade glibc-langpack-guUpgrade glibc-langpack-afUpgrade glibc-nss-develUpgrade glibc-langpack-amUpgrade glibc-langpack-sdUpgrade glibc-langpack-igUpgrade glibc-langpack-nnUpgrade glibc-langpack-urUpgrade glibc-langpack-akUpgrade libcryptUpgrade glibc-langpack-lvUpgrade glibc-langpack-bynUpgrade glibc-langpack-kuUpgrade glibc-langpack-rwUpgrade glibc-langpack-lijUpgrade glibc-langpack-aycUpgrade glibc-langpack-tkUpgrade glibc-langpack-jaUpgrade glibc-langpack-ruUpgrade glibc-langpack-isUpgrade glibc-langpack-kyUpgrade glibc-langpack-bhoUpgrade glibc-commonUpgrade glibc-langpack-saUpgrade glibc-langpack-itUpgrade glibc-langpack-tnUpgrade glibc-langpack-ssUpgrade glibc-langpack-elUpgrade glibc-langpack-yiUpgrade glibc-langpack-cmnUpgrade glibc-langpack-mlUpgrade glibc-langpack-klUpgrade glibc-langpack-hneUpgrade glibc-langpack-esUpgrade glibc-langpack-eoUpgrade glibc-langpack-csbUpgrade glibc-langpack-aaUpgrade glibc-langpack-zhUpgrade glibc-langpack-cyUpgrade glibc-minimal-langpackUpgrade glibc-langpack-foUpgrade glibc-langpack-siUpgrade glibc-langpack-ffUpgrade glibc-langpack-unmUpgrade glibc-langpack-tcyUpgrade glibc-langpack-euUpgrade glibc-langpack-enUpgrade glibc-langpack-boUpgrade glibc-langpack-psUpgrade glibc-langpack-teUpgrade glibc-langpack-szlUpgrade glibc-langpack-haUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ttUpgrade glibc-langpack-sidUpgrade glibc-langpack-shsUpgrade glibc-langpack-roUpgrade glibc-langpack-hyUpgrade glibc-all-langpacksUpgrade glibc-langpack-caUpgrade glibc-langpack-brUpgrade glibc-langpack-deUpgrade glibc-langpack-nlUpgrade glibc-langpack-cvUpgrade glibc-langpack-hrUpgrade glibc-langpack-bhbUpgrade glibc-langpack-gaUpgrade glibc-langpack-kokUpgrade glibc-langpack-mrUpgrade glibc-langpack-xhUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-ukUpgrade glibc-langpack-gezUpgrade glibc-langpack-lgUpgrade glibc-langpack-waUpgrade glibc-langpack-theUpgrade glibc-langpack-skUpgrade glibc-langpack-yoUpgrade glibc-langpack-lnUpgrade glibc-langpack-brxUpgrade glibc-langpack-uzUpgrade glibc | Apr 27, 2020 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Suse | — | Upgrade glibc-profileUpgrade glibc-i18ndataUpgrade glibc-32bitUpgrade glibc-langUpgrade glibc-devel-staticUpgrade glibc-develUpgrade glibc-extraUpgrade glibc-profile-32bitUpgrade glibc-locale-baseUpgrade glibc-devel-static-32bitUpgrade glibc-utils-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade nscdUpgrade glibc-htmlUpgrade glibc-utilsUpgrade glibc-localeUpgrade glibc-locale-32bitUpgrade glibc | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub