stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-asUpgrade glibc-langpack-chrUpgrade glibc-langpack-huUpgrade glibc-langpack-tgUpgrade glibc-langpack-tkUpgrade glibc-langpack-kwUpgrade glibc-langpack-nhnUpgrade glibc-langpack-sqUpgrade glibc-langpack-mtUpgrade glibc-langpack-idUpgrade glibc-langpack-maiUpgrade glibc-headersUpgrade glibc-langpack-frUpgrade glibc-utilsUpgrade glibc-langpack-anpUpgrade glibc-langpack-cmnUpgrade glibc-langpack-koUpgrade glibc-langpack-bgUpgrade glibc-langpack-doiUpgrade glibc-langpack-bsUpgrade glibc-langpack-yoUpgrade glibc-langpack-kaUpgrade glibc-langpack-fyUpgrade glibc-langpack-klUpgrade glibc-langpack-esUpgrade glibc-langpack-soUpgrade glibc-langpack-gvUpgrade glibc-langpack-anUpgrade nss_dbUpgrade glibc-langpack-beUpgrade glibc-staticUpgrade glibc-langpack-svUpgrade glibc-langpack-lnUpgrade glibcUpgrade glibc-langpack-psUpgrade glibc-langpack-slUpgrade glibc-langpack-nbUpgrade glibc-langpack-walUpgrade glibc-langpack-kmUpgrade glibc-langpack-mniUpgrade glibc-langpack-shsUpgrade glibc-langpack-brxUpgrade glibc-langpack-ltUpgrade glibc-langpack-aaUpgrade glibc-langpack-astUpgrade glibc-langpack-yueUpgrade glibc-langpack-arUpgrade glibc-langpack-ikUpgrade nss_hesiodUpgrade glibc-langpack-furUpgrade glibc-langpack-satUpgrade glibc-langpack-veUpgrade glibc-langpack-mnUpgrade glibc-langpack-neUpgrade glibc-langpack-papUpgrade glibc-langpack-igUpgrade nscdUpgrade glibc-langpack-niuUpgrade glibc-langpack-etUpgrade glibc-langpack-ksUpgrade glibc-langpack-liUpgrade glibc-langpack-nsoUpgrade glibc-langpack-thUpgrade glibc-langpack-viUpgrade glibc-langpack-waeUpgrade glibc-langpack-iaUpgrade glibc-langpack-ocUpgrade glibc-langpack-orUpgrade glibc-langpack-quzUpgrade glibc-langpack-msUpgrade glibc-langpack-rajUpgrade glibc-langpack-magUpgrade glibc-langpack-paUpgrade glibc-langpack-myUpgrade glibc-langpack-htUpgrade glibc-debuginfoUpgrade glibc-langpack-afUpgrade glibc-langpack-fiUpgrade glibc-langpack-heUpgrade glibc-langpack-bnUpgrade glibc-langpack-ugUpgrade glibc-langpack-lzhUpgrade glibc-langpack-amUpgrade glibc-langpack-scUpgrade glibc-langpack-srUpgrade glibc-langpack-ceUpgrade glibc-langpack-plUpgrade glibc-langpack-dvUpgrade glibc-langpack-kkUpgrade glibc-langpack-woUpgrade glibc-langpack-glUpgrade glibc-langpack-knUpgrade glibc-langpack-trUpgrade glibc-langpack-omUpgrade glibc-langpack-itUpgrade glibc-langpack-foUpgrade glibc-locale-sourceUpgrade glibc-langpack-gdUpgrade glibc-langpack-cvUpgrade glibc-langpack-csbUpgrade glibc-langpack-crhUpgrade glibc-langpack-mkUpgrade glibc-langpack-filUpgrade glibc-langpack-bemUpgrade glibc-langpack-nrUpgrade glibc-langpack-ruUpgrade glibc-langpack-sidUpgrade glibc-langpack-unmUpgrade glibc-langpack-theUpgrade glibc-langpack-loUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hneUpgrade glibc-benchtestsUpgrade glibc-langpack-tsUpgrade glibc-langpack-kyUpgrade glibc-langpack-waUpgrade glibc-langpack-sgsUpgrade glibc-langpack-mlUpgrade glibc-langpack-elUpgrade glibc-langpack-caUpgrade glibc-langpack-tnUpgrade glibc-langpack-akUpgrade glibc-langpack-haUpgrade glibc-langpack-zuUpgrade glibc-langpack-lvUpgrade glibc-langpack-uzUpgrade glibc-langpack-eoUpgrade glibc-langpack-nanUpgrade glibc-langpack-taUpgrade glibc-langpack-mrUpgrade glibc-langpack-skUpgrade glibc-nss-develUpgrade glibc-langpack-urUpgrade glibc-langpack-tigUpgrade glibc-langpack-osUpgrade glibc-langpack-iuUpgrade glibc-langpack-berUpgrade glibc-langpack-nnUpgrade glibc-langpack-szlUpgrade glibc-langpack-guUpgrade glibc-langpack-bhbUpgrade glibc-langpack-swUpgrade glibc-langpack-tcyUpgrade glibc-langpack-roUpgrade glibc-langpack-ptUpgrade glibc-langpack-hiUpgrade glibc-langpack-bhoUpgrade glibc-langpack-xhUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-ukUpgrade glibc-langpack-euUpgrade glibc-langpack-saUpgrade glibc-langpack-miUpgrade glibc-langpack-csUpgrade glibc-langpack-dzUpgrade glibc-langpack-daUpgrade glibc-langpack-azUpgrade glibc-langpack-lgUpgrade glibc-langpack-stUpgrade glibc-langpack-mhrUpgrade glibc-langpack-hrUpgrade glibc-langpack-jaUpgrade glibc-langpack-gezUpgrade glibc-langpack-sdUpgrade libcryptUpgrade glibc-langpack-aycUpgrade glibc-langpack-brUpgrade glibc-langpack-hsbUpgrade glibc-develUpgrade glibc-langpack-ssUpgrade glibc-langpack-kuUpgrade glibc-langpack-nlUpgrade glibc-langpack-hakUpgrade libcrypt-nssUpgrade glibc-langpack-ffUpgrade glibc-minimal-langpackUpgrade glibc-langpack-faUpgrade glibc-langpack-gaUpgrade glibc-langpack-isUpgrade glibc-langpack-boUpgrade nss_nisUpgrade glibc-langpack-yiUpgrade glibc-langpack-mgUpgrade glibc-langpack-rwUpgrade glibc-langpack-bynUpgrade glibc-langpack-seUpgrade glibc-commonUpgrade glibc-langpack-teUpgrade glibc-langpack-hyUpgrade glibc-langpack-siUpgrade glibc-langpack-lijUpgrade glibc-langpack-tlUpgrade glibc-langpack-cyUpgrade glibc-langpack-lbUpgrade glibc-langpack-kokUpgrade glibc-langpack-zhUpgrade glibc-langpack-deUpgrade glibc-all-langpacksUpgrade glibc-langpack-ttUpgrade glibc-langpack-tiUpgrade glibc-langpack-en | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibcUpgrade nscd | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-common | Sep 27, 2018 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-common | Feb 15, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibc-staticUpgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-common | Nov 6, 2018 | Feb 4, 2018 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-headersUpgrade glibc-debuginfo-commonUpgrade glibcNo solution existsUpgrade glibc-common | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-infoUpgrade glibc-x86Upgrade glibcUpgrade glibc-devel-32bitUpgrade nscdUpgrade glibc-32bitUpgrade glibc-profile-x86Upgrade glibc-devel-static-32bitUpgrade glibc-devel-staticUpgrade glibc-locale-base-32bitUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade glibc-localeUpgrade glibc-htmlUpgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibc-profileUpgrade glibc-utils-32bitUpgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-utilsUpgrade glibc-extraUpgrade glibc-devel | Jun 8, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6Upgrade libc6 (Ubuntu Pro) | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub