An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-csUpgrade glibc-langpack-afUpgrade glibc-langpack-lvUpgrade glibc-langpack-zhUpgrade glibc-langpack-asUpgrade glibc-langpack-nlUpgrade glibc-langpack-orUpgrade glibc-langpack-saUpgrade glibc-langpack-urUpgrade glibc-langpack-amUpgrade glibc-langpack-sidUpgrade glibc-langpack-siUpgrade libcryptUpgrade glibc-langpack-lnUpgrade glibc-langpack-loUpgrade glibc-langpack-kyUpgrade glibc-langpack-igUpgrade glibc-debuginfoUpgrade glibc-langpack-ffUpgrade glibc-langpack-isUpgrade glibc-langpack-esUpgrade glibc-langpack-koUpgrade glibc-langpack-kaUpgrade glibc-langpack-mgUpgrade glibc-langpack-klUpgrade glibc-langpack-lgUpgrade glibc-langpack-itUpgrade glibc-commonUpgrade glibc-langpack-nnUpgrade glibc-langpack-lzhUpgrade glibc-langpack-szlUpgrade glibc-langpack-nrUpgrade glibc-langpack-guUpgrade glibc-langpack-mnUpgrade glibc-langpack-heUpgrade glibc-langpack-trUpgrade glibc-langpack-bemUpgrade glibc-langpack-ocUpgrade glibc-langpack-gezUpgrade glibc-langpack-nbUpgrade glibc-all-langpacksUpgrade glibc-langpack-miUpgrade glibcUpgrade glibc-langpack-papUpgrade glibc-langpack-anUpgrade glibc-langpack-anpUpgrade glibc-langpack-teUpgrade glibc-langpack-hakUpgrade glibc-langpack-shsUpgrade glibc-langpack-hyUpgrade glibc-langpack-scUpgrade glibc-langpack-iaUpgrade glibc-langpack-xhUpgrade glibc-langpack-swUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-tcyUpgrade glibc-langpack-cvUpgrade glibc-staticUpgrade glibc-langpack-kuUpgrade glibc-langpack-deUpgrade glibc-langpack-psUpgrade glibc-langpack-skUpgrade glibc-langpack-seUpgrade glibc-langpack-niuUpgrade glibc-langpack-tlUpgrade glibc-minimal-langpackUpgrade glibc-langpack-kkUpgrade glibc-langpack-cmnUpgrade glibc-langpack-satUpgrade glibc-langpack-mrUpgrade glibc-langpack-hneUpgrade glibc-langpack-brxUpgrade glibc-langpack-sdUpgrade glibc-langpack-nanUpgrade glibc-langpack-roUpgrade nss_nisUpgrade glibc-langpack-berUpgrade glibc-langpack-enUpgrade glibc-langpack-akUpgrade glibc-develUpgrade glibc-langpack-rwUpgrade glibc-utilsUpgrade glibc-langpack-jaUpgrade glibc-langpack-theUpgrade glibc-langpack-tkUpgrade glibc-langpack-aycUpgrade glibc-langpack-gvUpgrade glibc-langpack-ttUpgrade glibc-langpack-paUpgrade glibc-langpack-stUpgrade glibc-langpack-mlUpgrade glibc-langpack-kokUpgrade glibc-langpack-csbUpgrade glibc-langpack-idUpgrade glibc-langpack-frUpgrade glibc-langpack-waUpgrade glibc-langpack-unmUpgrade glibc-langpack-zuUpgrade glibc-langpack-iuUpgrade glibc-langpack-tigUpgrade glibc-langpack-maiUpgrade glibc-langpack-nsoUpgrade glibc-langpack-taUpgrade glibc-langpack-elUpgrade glibc-langpack-ltUpgrade glibc-langpack-tiUpgrade glibc-langpack-hrUpgrade glibc-langpack-mkUpgrade glibc-langpack-haUpgrade glibc-langpack-boUpgrade nss_hesiodUpgrade nscdUpgrade glibc-langpack-yueUpgrade glibc-benchtestsUpgrade glibc-langpack-eoUpgrade glibc-langpack-chrUpgrade glibc-langpack-daUpgrade glibc-langpack-sgsUpgrade glibc-langpack-osUpgrade glibc-langpack-mtUpgrade glibc-langpack-ceUpgrade libcrypt-nssUpgrade nss_dbUpgrade glibc-langpack-plUpgrade glibc-langpack-ukUpgrade glibc-langpack-liUpgrade glibc-langpack-nhnUpgrade glibc-langpack-cyUpgrade glibc-langpack-filUpgrade glibc-langpack-tsUpgrade glibc-langpack-dzUpgrade glibc-langpack-svUpgrade glibc-langpack-ptUpgrade glibc-langpack-walUpgrade glibc-langpack-srUpgrade glibc-langpack-thUpgrade glibc-langpack-ruUpgrade glibc-langpack-rajUpgrade glibc-langpack-foUpgrade glibc-langpack-bnUpgrade glibc-langpack-astUpgrade glibc-langpack-glUpgrade glibc-langpack-quzUpgrade glibc-langpack-sqUpgrade glibc-langpack-fiUpgrade glibc-langpack-doiUpgrade glibc-langpack-caUpgrade glibc-langpack-beUpgrade glibc-nss-develUpgrade glibc-langpack-faUpgrade glibc-langpack-fyUpgrade glibc-headersUpgrade glibc-langpack-ksUpgrade glibc-langpack-viUpgrade glibc-langpack-magUpgrade glibc-langpack-dvUpgrade glibc-langpack-lbUpgrade glibc-langpack-mniUpgrade glibc-langpack-bgUpgrade glibc-langpack-veUpgrade glibc-langpack-kwUpgrade glibc-langpack-lijUpgrade glibc-langpack-hiUpgrade glibc-langpack-etUpgrade glibc-langpack-msUpgrade glibc-langpack-azUpgrade glibc-langpack-myUpgrade glibc-langpack-gdUpgrade glibc-langpack-arUpgrade glibc-langpack-htUpgrade glibc-langpack-neUpgrade glibc-langpack-woUpgrade glibc-langpack-huUpgrade glibc-langpack-bsUpgrade glibc-langpack-soUpgrade glibc-langpack-tgUpgrade glibc-langpack-kmUpgrade glibc-langpack-hsbUpgrade glibc-langpack-uzUpgrade glibc-langpack-aaUpgrade glibc-langpack-slUpgrade glibc-langpack-crhUpgrade glibc-langpack-ikUpgrade glibc-langpack-bhbUpgrade glibc-locale-sourceUpgrade glibc-langpack-ssUpgrade glibc-langpack-omUpgrade glibc-langpack-mhrUpgrade glibc-langpack-bhoUpgrade glibc-langpack-yiUpgrade glibc-langpack-ugUpgrade glibc-langpack-ndsUpgrade glibc-langpack-yoUpgrade glibc-langpack-gaUpgrade glibc-langpack-bynUpgrade glibc-langpack-euUpgrade glibc-langpack-furUpgrade glibc-langpack-brUpgrade glibc-langpack-knUpgrade glibc-langpack-tnUpgrade glibc-langpack-wae | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-common | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-devel | Dec 4, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-commonUpgrade nscdUpgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-devel | Sep 25, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-headers | Jun 27, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibc-staticUpgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utils | Nov 6, 2018 | May 17, 2018 |
| Redhat_linux | — | Upgrade glibc-headersUpgrade glibc-utilsUpgrade nscdUpgrade glibc-commonUpgrade glibcUpgrade glibc-debuginfoUpgrade glibc-debuginfo-commonUpgrade glibc-staticUpgrade glibc-devel | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-utils-32bitUpgrade glibcUpgrade glibc-locale-baseUpgrade glibc-locale-base-32bitUpgrade glibc-locale-32bitUpgrade glibc-profileUpgrade glibc-devel-32bitUpgrade nscdUpgrade glibc-devel-staticUpgrade glibc-32bitUpgrade glibc-htmlUpgrade glibc-langUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-localeUpgrade glibc-i18ndataUpgrade glibc-infoUpgrade glibc-extraUpgrade glibc-profile-32bitUpgrade glibc-devel-static-32bit | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub