An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-lnUpgrade glibc-langpack-swUpgrade glibc-langpack-lzhUpgrade glibc-langpack-niuUpgrade glibc-langpack-nrUpgrade glibc-langpack-orUpgrade glibc-langpack-scUpgrade glibc-commonUpgrade glibc-langpack-itUpgrade glibc-langpack-zhUpgrade glibc-langpack-asUpgrade glibc-langpack-mgUpgrade glibc-langpack-shsUpgrade glibc-langpack-kaUpgrade glibcUpgrade glibc-langpack-hakUpgrade glibc-langpack-klUpgrade glibc-langpack-lgUpgrade glibc-langpack-hneUpgrade glibc-langpack-roUpgrade glibc-langpack-ocUpgrade glibc-langpack-xhUpgrade nss_nisUpgrade glibc-langpack-satUpgrade glibc-langpack-koUpgrade glibc-langpack-cmnUpgrade glibc-langpack-bemUpgrade glibc-langpack-kuUpgrade glibc-langpack-berUpgrade glibc-langpack-gezUpgrade glibc-langpack-anUpgrade glibc-langpack-nnUpgrade glibc-langpack-sdUpgrade glibc-langpack-sidUpgrade glibc-langpack-afUpgrade glibc-debuginfoUpgrade glibc-langpack-deUpgrade libcryptUpgrade glibc-langpack-tcyUpgrade glibc-langpack-ffUpgrade glibc-langpack-seUpgrade glibc-langpack-tlUpgrade glibc-langpack-guUpgrade glibc-minimal-langpackUpgrade glibc-langpack-miUpgrade glibc-langpack-urUpgrade glibc-langpack-ttUpgrade glibc-langpack-gvUpgrade glibc-langpack-saUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-maiUpgrade glibc-langpack-isUpgrade glibc-langpack-skUpgrade glibc-langpack-cvUpgrade glibc-langpack-mlUpgrade glibc-langpack-zuUpgrade glibc-langpack-unmUpgrade glibc-langpack-akUpgrade glibc-all-langpacksUpgrade glibc-utilsUpgrade glibc-langpack-csbUpgrade glibc-langpack-jaUpgrade glibc-langpack-frUpgrade glibc-langpack-aycUpgrade glibc-langpack-papUpgrade glibc-langpack-teUpgrade glibc-langpack-nanUpgrade glibc-langpack-trUpgrade glibc-langpack-kokUpgrade glibc-langpack-waUpgrade glibc-langpack-kkUpgrade glibc-langpack-heUpgrade glibc-develUpgrade glibc-langpack-anpUpgrade glibc-langpack-idUpgrade glibc-langpack-brxUpgrade glibc-langpack-csUpgrade glibc-langpack-enUpgrade glibc-langpack-lvUpgrade glibc-langpack-iuUpgrade glibc-langpack-esUpgrade glibc-langpack-hyUpgrade glibc-langpack-paUpgrade glibc-langpack-psUpgrade glibc-langpack-rwUpgrade glibc-langpack-igUpgrade glibc-langpack-amUpgrade glibc-langpack-stUpgrade glibc-langpack-kyUpgrade glibc-langpack-theUpgrade glibc-langpack-iaUpgrade glibc-langpack-siUpgrade glibc-langpack-mnUpgrade glibc-langpack-loUpgrade glibc-langpack-nlUpgrade glibc-langpack-szlUpgrade glibc-staticUpgrade glibc-langpack-tigUpgrade glibc-langpack-nbUpgrade glibc-langpack-tkUpgrade glibc-langpack-mrUpgrade glibc-langpack-ltUpgrade glibc-langpack-elUpgrade nscdUpgrade glibc-langpack-myUpgrade glibc-langpack-msUpgrade glibc-langpack-bnUpgrade glibc-langpack-aaUpgrade glibc-langpack-hrUpgrade glibc-langpack-boUpgrade glibc-langpack-mkUpgrade glibc-langpack-uzUpgrade glibc-langpack-glUpgrade glibc-langpack-yueUpgrade glibc-langpack-ukUpgrade glibc-langpack-rajUpgrade glibc-langpack-tiUpgrade glibc-langpack-knUpgrade glibc-langpack-doiUpgrade glibc-langpack-thUpgrade glibc-langpack-caUpgrade glibc-langpack-crhUpgrade glibc-langpack-sgsUpgrade glibc-langpack-plUpgrade glibc-langpack-ceUpgrade nss_dbUpgrade glibc-langpack-ndsUpgrade glibc-langpack-svUpgrade nss_hesiodUpgrade glibc-langpack-gaUpgrade glibc-langpack-mniUpgrade glibc-langpack-quzUpgrade glibc-langpack-ruUpgrade glibc-langpack-mtUpgrade glibc-langpack-bynUpgrade glibc-langpack-liUpgrade glibc-langpack-furUpgrade glibc-langpack-cyUpgrade glibc-langpack-euUpgrade glibc-langpack-veUpgrade libcrypt-nssUpgrade glibc-langpack-sqUpgrade glibc-langpack-beUpgrade glibc-langpack-kwUpgrade glibc-langpack-soUpgrade glibc-langpack-hiUpgrade glibc-langpack-lijUpgrade glibc-langpack-arUpgrade glibc-langpack-neUpgrade glibc-langpack-tgUpgrade glibc-langpack-woUpgrade glibc-langpack-kmUpgrade glibc-langpack-huUpgrade glibc-langpack-hsbUpgrade glibc-langpack-gdUpgrade glibc-langpack-bsUpgrade glibc-langpack-azUpgrade glibc-langpack-htUpgrade glibc-langpack-etUpgrade glibc-langpack-waeUpgrade glibc-langpack-dzUpgrade glibc-nss-develUpgrade glibc-langpack-srUpgrade glibc-langpack-walUpgrade glibc-langpack-fiUpgrade glibc-langpack-yoUpgrade glibc-langpack-daUpgrade glibc-langpack-fyUpgrade glibc-benchtestsUpgrade glibc-langpack-magUpgrade glibc-langpack-slUpgrade glibc-langpack-haUpgrade glibc-langpack-taUpgrade glibc-langpack-nsoUpgrade glibc-langpack-astUpgrade glibc-langpack-bhbUpgrade glibc-langpack-ugUpgrade glibc-locale-sourceUpgrade glibc-langpack-omUpgrade glibc-langpack-yiUpgrade glibc-langpack-ssUpgrade glibc-langpack-mhrUpgrade glibc-langpack-bhoUpgrade glibc-langpack-foUpgrade glibc-headersUpgrade glibc-langpack-tnUpgrade glibc-langpack-chrUpgrade glibc-langpack-lbUpgrade glibc-langpack-viUpgrade glibc-langpack-eoUpgrade glibc-langpack-ksUpgrade glibc-langpack-dvUpgrade glibc-langpack-ikUpgrade glibc-langpack-ptUpgrade glibc-langpack-osUpgrade glibc-langpack-bgUpgrade glibc-langpack-filUpgrade glibc-langpack-brUpgrade glibc-langpack-tsUpgrade glibc-langpack-nhnUpgrade glibc-langpack-fa | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-debuginfoUpgrade glibc-utilsUpgrade nscdUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade glibcUpgrade glibc-debuginfo-commonUpgrade glibc-devel | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nscdUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibcUpgrade glibc-headers | Dec 4, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-develUpgrade glibc-staticUpgrade nscdUpgrade glibc-headersUpgrade glibcUpgrade glibc-utilsUpgrade glibc-common | Sep 25, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-common | Jun 27, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-utils | Nov 6, 2018 | May 17, 2018 |
| Redhat_linux | — | Upgrade glibcUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscdUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibc-devel | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-devel-staticUpgrade glibc-infoUpgrade glibc-localeUpgrade glibc-utilsUpgrade glibc-extraUpgrade glibc-profile-32bitUpgrade glibc-devel-static-32bitUpgrade glibc-32bitUpgrade glibc-i18ndataUpgrade glibc-htmlUpgrade glibc-develUpgrade glibc-langUpgrade glibc-devel-32bitUpgrade glibc-profileUpgrade glibc-locale-baseUpgrade glibc | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub