stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-seUpgrade glibc-langpack-kokUpgrade glibc-langpack-miUpgrade glibc-langpack-nrUpgrade glibc-langpack-cyUpgrade glibc-langpack-tiUpgrade glibc-langpack-ttUpgrade glibc-langpack-siUpgrade glibc-langpack-teUpgrade glibc-langpack-ruUpgrade glibc-langpack-bhoUpgrade glibc-langpack-hsbUpgrade glibc-langpack-hiUpgrade glibc-langpack-tcyUpgrade glibc-langpack-uzUpgrade glibc-langpack-zuUpgrade glibc-langpack-ptUpgrade glibc-langpack-ukUpgrade glibc-nss-develUpgrade glibc-langpack-kyUpgrade glibc-langpack-lvUpgrade glibc-langpack-swUpgrade glibc-langpack-akUpgrade glibc-langpack-euUpgrade glibc-langpack-csUpgrade glibc-langpack-isUpgrade glibc-langpack-elUpgrade glibc-langpack-gaUpgrade glibc-langpack-urUpgrade glibc-langpack-iuUpgrade glibc-langpack-taUpgrade glibc-langpack-tnUpgrade glibc-langpack-mlUpgrade glibc-langpack-ffUpgrade glibc-langpack-ssUpgrade glibc-langpack-hrUpgrade glibc-langpack-haUpgrade glibc-langpack-lgUpgrade glibc-langpack-bynUpgrade glibc-langpack-waUpgrade glibc-langpack-sgsUpgrade glibc-langpack-hakUpgrade glibc-langpack-roUpgrade glibc-langpack-sdUpgrade glibc-langpack-tsUpgrade glibc-langpack-kuUpgrade glibc-develUpgrade glibc-langpack-jaUpgrade glibc-langpack-sidUpgrade glibc-langpack-zhUpgrade glibc-langpack-unmUpgrade glibc-langpack-mrUpgrade glibc-langpack-nlUpgrade glibc-langpack-nanUpgrade glibc-langpack-brUpgrade glibc-langpack-enUpgrade glibc-benchtestsUpgrade glibc-langpack-theUpgrade glibc-langpack-ndsUpgrade glibc-langpack-loUpgrade libcrypt-nssUpgrade glibc-langpack-rwUpgrade glibc-langpack-dzUpgrade glibc-langpack-hyUpgrade glibc-langpack-gezUpgrade glibc-all-langpacksUpgrade glibc-langpack-lbUpgrade glibc-langpack-tlUpgrade glibc-langpack-hneUpgrade glibc-langpack-bemUpgrade glibc-minimal-langpackUpgrade glibc-langpack-osUpgrade libcryptUpgrade glibc-langpack-aycUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-mhrUpgrade glibc-langpack-deUpgrade glibc-langpack-lijUpgrade glibc-commonUpgrade glibc-langpack-tigUpgrade glibc-langpack-xhUpgrade nss_nisUpgrade glibc-langpack-szlUpgrade glibc-langpack-boUpgrade glibc-langpack-skUpgrade glibc-langpack-caUpgrade glibc-langpack-stUpgrade glibc-langpack-azUpgrade glibc-langpack-berUpgrade glibc-langpack-yiUpgrade glibc-langpack-daUpgrade glibc-langpack-mgUpgrade glibc-langpack-faUpgrade glibc-langpack-nnUpgrade glibc-langpack-saUpgrade glibc-langpack-guUpgrade glibc-langpack-bhbUpgrade glibc-langpack-eoUpgrade glibc-langpack-viUpgrade glibc-langpack-ceUpgrade glibc-langpack-tgUpgrade glibc-langpack-nhnUpgrade glibc-langpack-kwUpgrade glibc-langpack-furUpgrade glibc-langpack-nsoUpgrade glibc-langpack-waeUpgrade glibc-utilsUpgrade nscdUpgrade glibc-langpack-neUpgrade glibc-langpack-mtUpgrade glibc-langpack-bsUpgrade glibc-langpack-asUpgrade nss_hesiodUpgrade glibc-langpack-cmnUpgrade glibc-langpack-mniUpgrade glibc-langpack-iaUpgrade glibc-langpack-dvUpgrade glibc-langpack-chrUpgrade glibc-langpack-sqUpgrade glibc-langpack-woUpgrade glibc-langpack-idUpgrade glibc-headersUpgrade glibc-langpack-huUpgrade glibc-langpack-ksUpgrade glibc-langpack-anpUpgrade glibc-langpack-niuUpgrade glibc-langpack-bgUpgrade glibc-langpack-msUpgrade glibc-langpack-crhUpgrade glibc-langpack-slUpgrade glibc-langpack-bnUpgrade glibc-langpack-walUpgrade glibc-langpack-heUpgrade glibc-langpack-fiUpgrade glibcUpgrade glibc-langpack-lnUpgrade glibc-langpack-htUpgrade glibc-langpack-koUpgrade glibc-langpack-trUpgrade glibc-langpack-kaUpgrade glibc-langpack-doiUpgrade glibc-langpack-soUpgrade glibc-langpack-brxUpgrade glibc-locale-sourceUpgrade glibc-langpack-myUpgrade glibc-langpack-papUpgrade glibc-langpack-paUpgrade glibc-langpack-orUpgrade glibc-langpack-omUpgrade glibc-langpack-mkUpgrade glibc-langpack-arUpgrade glibc-langpack-kmUpgrade glibc-langpack-itUpgrade glibc-langpack-plUpgrade glibc-langpack-ocUpgrade glibc-langpack-glUpgrade glibc-langpack-fyUpgrade glibc-langpack-foUpgrade glibc-langpack-astUpgrade glibc-langpack-igUpgrade glibc-langpack-aaUpgrade glibc-langpack-knUpgrade glibc-langpack-beUpgrade glibc-langpack-amUpgrade glibc-langpack-scUpgrade glibc-langpack-ugUpgrade glibc-langpack-liUpgrade glibc-staticUpgrade nss_dbUpgrade glibc-langpack-psUpgrade glibc-langpack-nbUpgrade glibc-langpack-esUpgrade glibc-langpack-thUpgrade glibc-langpack-tkUpgrade glibc-langpack-klUpgrade glibc-langpack-mnUpgrade glibc-langpack-etUpgrade glibc-langpack-satUpgrade glibc-langpack-filUpgrade glibc-langpack-afUpgrade glibc-debuginfoUpgrade glibc-langpack-gdUpgrade glibc-langpack-anUpgrade glibc-langpack-frUpgrade glibc-langpack-csbUpgrade glibc-langpack-rajUpgrade glibc-langpack-yoUpgrade glibc-langpack-yueUpgrade glibc-langpack-veUpgrade glibc-langpack-svUpgrade glibc-langpack-shsUpgrade glibc-langpack-maiUpgrade glibc-langpack-quzUpgrade glibc-langpack-magUpgrade glibc-langpack-cvUpgrade glibc-langpack-ltUpgrade glibc-langpack-ikUpgrade glibc-langpack-lzhUpgrade glibc-langpack-srUpgrade glibc-langpack-gvUpgrade glibc-langpack-kk | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-devel | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade nscdUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-common | Sep 27, 2018 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade nscd | Feb 15, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-utilsUpgrade nscdUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-devel | Nov 6, 2018 | Feb 4, 2018 |
| Redhat_linux | — | Upgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade nscdUpgrade glibc-debuginfo-commonNo solution existsUpgrade glibcUpgrade glibc-headersUpgrade glibc-common | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-devel-32bitUpgrade glibc-devel-static-32bitUpgrade glibc-infoUpgrade glibc-locale-base-32bitUpgrade glibc-profile-32bitUpgrade glibc-32bitUpgrade glibc-devel-staticUpgrade glibc-langUpgrade glibc-locale-baseUpgrade glibc-htmlUpgrade glibc-localeUpgrade glibc-locale-32bitUpgrade nscdUpgrade glibc-profile-x86Upgrade glibcUpgrade glibc-x86Upgrade glibc-extraUpgrade glibc-utilsUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-utils-32bitUpgrade glibc-locale-x86Upgrade glibc-profile | Jun 8, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6Upgrade libc6 (Ubuntu Pro) | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub