stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-trUpgrade glibc-langpack-bsUpgrade glibc-langpack-doiUpgrade glibc-langpack-msUpgrade glibc-debuginfoUpgrade glibc-langpack-kaUpgrade glibc-langpack-frUpgrade glibc-langpack-woUpgrade glibc-langpack-anUpgrade glibc-langpack-cvUpgrade glibc-langpack-soUpgrade glibc-langpack-svUpgrade glibc-langpack-veUpgrade glibc-langpack-quzUpgrade glibc-langpack-yueUpgrade glibc-langpack-maiUpgrade glibc-langpack-idUpgrade glibc-langpack-magUpgrade glibc-langpack-rajUpgrade glibc-langpack-afUpgrade glibc-langpack-niuUpgrade glibc-langpack-koUpgrade nscdUpgrade glibc-langpack-crhUpgrade glibc-langpack-aaUpgrade glibc-langpack-ltUpgrade glibc-langpack-papUpgrade glibc-langpack-fyUpgrade glibc-langpack-mkUpgrade glibc-langpack-paUpgrade glibc-langpack-igUpgrade glibc-langpack-itUpgrade glibc-langpack-myUpgrade glibc-langpack-kmUpgrade glibc-langpack-foUpgrade glibc-langpack-arUpgrade glibc-langpack-omUpgrade glibc-langpack-astUpgrade glibc-langpack-plUpgrade glibc-locale-sourceUpgrade glibc-langpack-brxUpgrade glibc-langpack-knUpgrade glibc-langpack-tgUpgrade glibc-headersUpgrade glibc-langpack-nsoUpgrade glibc-langpack-waeUpgrade glibc-langpack-tkUpgrade glibc-langpack-cmnUpgrade glibc-langpack-chrUpgrade glibc-langpack-dvUpgrade glibc-langpack-huUpgrade glibc-langpack-klUpgrade glibc-langpack-mtUpgrade glibc-langpack-thUpgrade glibc-langpack-ocUpgrade glibc-langpack-kwUpgrade glibc-langpack-ikUpgrade glibc-langpack-shsUpgrade glibc-langpack-orUpgrade glibc-langpack-csbUpgrade glibc-langpack-etUpgrade glibc-langpack-mniUpgrade glibc-langpack-kkUpgrade glibc-langpack-bgUpgrade glibc-langpack-scUpgrade nss_dbUpgrade glibc-langpack-ceUpgrade glibc-langpack-psUpgrade glibc-langpack-satUpgrade glibc-langpack-gdUpgrade glibc-langpack-lzhUpgrade glibc-langpack-yoUpgrade glibc-langpack-lnUpgrade glibc-langpack-slUpgrade glibc-langpack-filUpgrade glibc-langpack-walUpgrade glibc-langpack-heUpgrade glibcUpgrade glibc-langpack-fiUpgrade glibc-langpack-furUpgrade glibc-langpack-anpUpgrade glibc-utilsUpgrade glibc-langpack-neUpgrade glibc-langpack-htUpgrade glibc-langpack-mnUpgrade glibc-langpack-bnUpgrade glibc-langpack-sqUpgrade glibc-langpack-glUpgrade glibc-langpack-srUpgrade glibc-langpack-esUpgrade glibc-langpack-ugUpgrade glibc-staticUpgrade glibc-langpack-beUpgrade glibc-langpack-nbUpgrade nss_hesiodUpgrade glibc-langpack-asUpgrade glibc-langpack-gvUpgrade glibc-langpack-liUpgrade glibc-langpack-amUpgrade glibc-langpack-nhnUpgrade glibc-langpack-ksUpgrade glibc-langpack-iaUpgrade glibc-langpack-viUpgrade glibc-langpack-enUpgrade glibc-langpack-unmUpgrade glibc-langpack-seUpgrade glibc-langpack-hsbUpgrade glibc-langpack-nlUpgrade glibc-langpack-siUpgrade glibc-langpack-bhbUpgrade glibc-langpack-gaUpgrade glibc-langpack-szlUpgrade glibc-langpack-taUpgrade glibc-langpack-mlUpgrade glibc-langpack-saUpgrade glibc-langpack-azUpgrade glibc-langpack-kokUpgrade glibc-langpack-aycUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hiUpgrade glibc-langpack-zhUpgrade glibc-langpack-tsUpgrade glibc-langpack-sidUpgrade glibc-langpack-sgsUpgrade glibc-langpack-lijUpgrade glibc-langpack-sdUpgrade glibc-langpack-gezUpgrade glibc-langpack-dzUpgrade glibc-langpack-brUpgrade glibc-all-langpacksUpgrade libcryptUpgrade glibc-langpack-lbUpgrade glibc-langpack-deUpgrade glibc-benchtestsUpgrade glibc-langpack-theUpgrade glibc-langpack-daUpgrade glibc-langpack-bhoUpgrade glibc-langpack-ptUpgrade glibc-langpack-tcyUpgrade glibc-langpack-roUpgrade glibc-langpack-swUpgrade glibc-langpack-loUpgrade glibc-langpack-lvUpgrade glibc-langpack-elUpgrade glibc-langpack-ffUpgrade glibc-langpack-tnUpgrade glibc-langpack-haUpgrade glibc-langpack-nnUpgrade glibc-langpack-faUpgrade glibc-langpack-skUpgrade glibc-langpack-mgUpgrade glibc-langpack-ruUpgrade glibc-langpack-bynUpgrade glibc-langpack-teUpgrade glibc-langpack-nrUpgrade glibc-langpack-cyUpgrade glibc-langpack-miUpgrade glibc-langpack-bemUpgrade glibc-commonUpgrade glibc-langpack-hyUpgrade glibc-langpack-tlUpgrade glibc-langpack-tiUpgrade libcrypt-nssUpgrade glibc-langpack-ttUpgrade glibc-langpack-rwUpgrade glibc-nss-develUpgrade glibc-langpack-urUpgrade glibc-langpack-ukUpgrade glibc-langpack-csUpgrade glibc-langpack-akUpgrade glibc-langpack-mhrUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-stUpgrade glibc-langpack-osUpgrade glibc-langpack-nanUpgrade glibc-langpack-lgUpgrade glibc-langpack-jaUpgrade glibc-langpack-berUpgrade glibc-langpack-iuUpgrade glibc-langpack-euUpgrade glibc-langpack-isUpgrade glibc-langpack-tigUpgrade glibc-langpack-caUpgrade glibc-langpack-uzUpgrade glibc-langpack-guUpgrade glibc-langpack-boUpgrade glibc-langpack-waUpgrade glibc-langpack-zuUpgrade glibc-langpack-kyUpgrade glibc-langpack-xhUpgrade glibc-langpack-hrUpgrade glibc-langpack-mrUpgrade glibc-langpack-eoUpgrade glibc-minimal-langpackUpgrade glibc-langpack-hneUpgrade glibc-langpack-yiUpgrade nss_nisUpgrade glibc-langpack-kuUpgrade glibc-langpack-ssUpgrade glibc-develUpgrade glibc-langpack-hak | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibc-develUpgrade nscdUpgrade glibc | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibcUpgrade glibc-headersUpgrade nscd | Sep 27, 2018 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-utils | Feb 15, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibc-commonUpgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-staticUpgrade glibc-utilsUpgrade nscd | Nov 6, 2018 | Feb 4, 2018 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-utilsNo solution existsUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-common | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-devel-32bitUpgrade glibc-htmlUpgrade glibc-x86Upgrade glibc-profile-x86Upgrade nscdUpgrade glibc-langUpgrade glibc-infoUpgrade glibc-locale-baseUpgrade glibc-devel-static-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-devel-staticUpgrade glibc-profile-32bitUpgrade glibc-locale-32bitUpgrade glibc-32bitUpgrade glibc-localeUpgrade glibcUpgrade glibc-extraUpgrade glibc-develUpgrade glibc-locale-x86Upgrade glibc-utilsUpgrade glibc-profileUpgrade glibc-i18ndataUpgrade glibc-utils-32bit | Jun 8, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6Upgrade libc6 (Ubuntu Pro) | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub