An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-svUpgrade glibc-langpack-fiUpgrade glibc-langpack-mniUpgrade glibc-langpack-boUpgrade glibc-langpack-gaUpgrade glibc-langpack-lijUpgrade glibc-langpack-msUpgrade glibc-langpack-bsUpgrade glibc-langpack-arUpgrade glibc-langpack-huUpgrade glibc-langpack-kmUpgrade glibc-headersUpgrade glibc-langpack-tgUpgrade glibc-langpack-neUpgrade glibc-langpack-azUpgrade glibc-langpack-woUpgrade glibc-langpack-kwUpgrade glibc-langpack-myUpgrade glibc-langpack-soUpgrade glibc-langpack-htUpgrade glibc-langpack-gdUpgrade glibc-langpack-hiUpgrade glibc-langpack-hsbUpgrade glibc-langpack-etUpgrade glibc-langpack-ksUpgrade nss_dbUpgrade glibc-langpack-lbUpgrade libcrypt-nssUpgrade glibc-langpack-doiUpgrade glibc-langpack-waeUpgrade glibc-langpack-magUpgrade glibc-langpack-ceUpgrade glibc-langpack-daUpgrade glibc-langpack-dvUpgrade glibc-langpack-yoUpgrade glibc-langpack-chrUpgrade glibc-langpack-veUpgrade glibc-langpack-bynUpgrade glibc-benchtestsUpgrade glibc-langpack-mtUpgrade glibc-langpack-fyUpgrade glibc-langpack-ltUpgrade glibc-langpack-ndsUpgrade nss_hesiodUpgrade glibc-langpack-sgsUpgrade glibc-langpack-uzUpgrade glibc-langpack-plUpgrade nscdUpgrade glibc-langpack-euUpgrade glibc-langpack-caUpgrade glibc-langpack-furUpgrade glibc-langpack-viUpgrade glibc-langpack-crhUpgrade glibc-langpack-tnUpgrade glibc-langpack-yueUpgrade glibc-langpack-dzUpgrade glibc-langpack-eoUpgrade glibc-langpack-sqUpgrade glibc-langpack-faUpgrade glibc-langpack-taUpgrade glibc-langpack-hrUpgrade glibc-langpack-mkUpgrade glibc-langpack-haUpgrade glibc-nss-develUpgrade glibc-langpack-cyUpgrade glibc-langpack-ukUpgrade glibc-langpack-elUpgrade glibc-langpack-beUpgrade glibc-langpack-bhbUpgrade glibc-langpack-bhoUpgrade glibc-langpack-tiUpgrade glibc-langpack-quzUpgrade glibc-langpack-omUpgrade glibc-langpack-ssUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ugUpgrade glibc-langpack-bgUpgrade glibc-langpack-tsUpgrade glibc-langpack-osUpgrade glibc-langpack-yiUpgrade glibc-langpack-aaUpgrade glibc-langpack-filUpgrade glibc-langpack-brUpgrade glibc-langpack-ptUpgrade glibc-langpack-slUpgrade glibc-locale-sourceUpgrade glibc-langpack-ikUpgrade glibc-langpack-liUpgrade glibc-langpack-foUpgrade glibc-langpack-astUpgrade glibc-langpack-walUpgrade glibc-langpack-bnUpgrade glibc-langpack-srUpgrade glibc-langpack-rajUpgrade glibc-langpack-ruUpgrade glibc-langpack-glUpgrade glibc-langpack-nsoUpgrade glibc-langpack-thUpgrade glibc-langpack-nhnUpgrade glibc-langpack-knUpgrade glibc-langpack-akUpgrade glibc-langpack-itUpgrade glibc-langpack-csUpgrade glibc-langpack-brxUpgrade glibc-develUpgrade glibc-langpack-trUpgrade glibc-langpack-szlUpgrade glibc-langpack-papUpgrade glibc-langpack-skUpgrade glibc-langpack-seUpgrade glibc-langpack-nlUpgrade glibc-langpack-anUpgrade glibc-langpack-nnUpgrade glibc-langpack-jaUpgrade glibc-langpack-zuUpgrade glibc-langpack-csbUpgrade glibc-langpack-ttUpgrade glibc-langpack-mlUpgrade glibc-langpack-stUpgrade glibc-langpack-paUpgrade glibc-langpack-idUpgrade glibc-langpack-maiUpgrade glibc-langpack-theUpgrade glibc-langpack-shsUpgrade glibc-langpack-klUpgrade glibc-langpack-scUpgrade glibc-langpack-lzhUpgrade glibc-langpack-orUpgrade glibc-commonUpgrade glibc-langpack-zhUpgrade glibc-langpack-niuUpgrade glibc-langpack-mgUpgrade glibc-langpack-lgUpgrade glibc-langpack-lnUpgrade glibc-langpack-nrUpgrade glibc-langpack-kaUpgrade glibc-langpack-isUpgrade glibc-langpack-loUpgrade glibc-langpack-igUpgrade glibc-debuginfoUpgrade glibc-langpack-siUpgrade glibc-langpack-kyUpgrade glibc-langpack-ffUpgrade glibc-langpack-kokUpgrade glibc-langpack-rwUpgrade glibc-langpack-tkUpgrade glibc-all-langpacksUpgrade glibc-langpack-asUpgrade glibc-langpack-urUpgrade glibc-langpack-anpUpgrade glibc-langpack-nbUpgrade glibc-langpack-mrUpgrade glibc-langpack-heUpgrade glibc-langpack-kkUpgrade glibc-langpack-enUpgrade glibc-langpack-teUpgrade glibc-langpack-nanUpgrade libcryptUpgrade glibc-langpack-swUpgrade glibc-langpack-tcyUpgrade glibc-langpack-psUpgrade glibc-langpack-hyUpgrade glibc-langpack-lvUpgrade glibc-langpack-esUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-xhUpgrade glibc-langpack-sidUpgrade glibc-langpack-sdUpgrade glibc-langpack-satUpgrade glibc-langpack-roUpgrade glibc-langpack-hneUpgrade glibc-langpack-koUpgrade glibc-langpack-miUpgrade glibc-langpack-gezUpgrade glibc-langpack-cmnUpgrade glibc-langpack-hakUpgrade glibc-langpack-berUpgrade glibc-langpack-afUpgrade glibc-langpack-bemUpgrade glibc-langpack-ocUpgrade glibcUpgrade nss_nisUpgrade glibc-langpack-tigUpgrade glibc-langpack-waUpgrade glibc-langpack-iuUpgrade glibc-langpack-saUpgrade glibc-langpack-unmUpgrade glibc-utilsUpgrade glibc-langpack-aycUpgrade glibc-langpack-frUpgrade glibc-langpack-gvUpgrade glibc-langpack-deUpgrade glibc-langpack-guUpgrade glibc-langpack-mnUpgrade glibc-langpack-iaUpgrade glibc-langpack-cvUpgrade glibc-langpack-amUpgrade glibc-langpack-kuUpgrade glibc-minimal-langpackUpgrade glibc-staticUpgrade glibc-langpack-tl | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibcUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-utilsUpgrade nscdUpgrade glibc-debuginfo | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-commonUpgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade glibc | Dec 4, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nscdUpgrade glibcUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-static | Sep 25, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-staticUpgrade glibcUpgrade nscdUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-devel | Jun 27, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-staticUpgrade nscdUpgrade glibc | Nov 6, 2018 | May 17, 2018 |
| Redhat_linux | — | Upgrade glibc-commonUpgrade glibcUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscdUpgrade glibc-debuginfo-commonUpgrade glibc-staticUpgrade glibc-devel | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-utils-32bitUpgrade glibcUpgrade glibc-locale-base-32bitUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-profileUpgrade nscdUpgrade glibc-locale-32bitUpgrade glibc-utilsUpgrade glibc-localeUpgrade glibc-devel-staticUpgrade glibc-infoUpgrade glibc-htmlUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade glibc-extraUpgrade glibc-devel-static-32bitUpgrade glibc-32bit | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub