An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-eoUpgrade glibc-headersUpgrade glibc-langpack-ikUpgrade glibc-langpack-faUpgrade glibc-langpack-lbUpgrade glibc-langpack-ltUpgrade glibc-langpack-dvUpgrade glibc-langpack-magUpgrade glibc-langpack-chrUpgrade glibc-benchtestsUpgrade glibc-langpack-waeUpgrade glibc-langpack-tnUpgrade glibc-langpack-fyUpgrade glibc-langpack-caUpgrade glibc-langpack-hiUpgrade glibc-langpack-bnUpgrade glibc-langpack-walUpgrade glibc-langpack-glUpgrade glibc-langpack-mniUpgrade glibc-langpack-bhoUpgrade glibc-langpack-omUpgrade glibc-langpack-ssUpgrade glibc-locale-sourceUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ugUpgrade glibc-langpack-yiUpgrade glibc-langpack-hrUpgrade glibc-langpack-bhbUpgrade glibc-langpack-gaUpgrade glibc-langpack-svUpgrade glibc-langpack-ksUpgrade glibc-langpack-foUpgrade glibc-langpack-bgUpgrade glibc-langpack-slUpgrade glibc-langpack-etUpgrade glibc-nss-develUpgrade glibc-langpack-haUpgrade glibc-langpack-doiUpgrade glibc-langpack-bynUpgrade glibc-langpack-sqUpgrade glibc-langpack-srUpgrade glibc-langpack-fiUpgrade glibc-langpack-hsbUpgrade glibc-langpack-taUpgrade glibc-langpack-dzUpgrade glibc-langpack-beUpgrade glibc-langpack-knUpgrade nss_hesiodUpgrade glibc-langpack-osUpgrade glibc-langpack-yueUpgrade glibc-langpack-brUpgrade glibc-langpack-azUpgrade glibc-langpack-bsUpgrade glibc-langpack-tiUpgrade glibc-langpack-quzUpgrade glibc-langpack-huUpgrade glibc-langpack-arUpgrade glibc-langpack-kmUpgrade glibc-langpack-ruUpgrade glibc-langpack-filUpgrade glibc-langpack-crhUpgrade glibc-langpack-veUpgrade glibc-langpack-astUpgrade glibc-langpack-myUpgrade glibc-langpack-daUpgrade glibc-langpack-thUpgrade glibc-langpack-yoUpgrade glibc-langpack-mkUpgrade glibc-langpack-htUpgrade glibc-langpack-gdUpgrade glibc-langpack-viUpgrade glibc-langpack-nsoUpgrade glibc-langpack-furUpgrade nss_dbUpgrade glibc-langpack-sgsUpgrade glibc-langpack-liUpgrade glibc-langpack-ceUpgrade glibc-langpack-mtUpgrade glibc-langpack-plUpgrade glibc-langpack-rajUpgrade glibc-langpack-ukUpgrade libcrypt-nssUpgrade glibc-langpack-euUpgrade glibc-langpack-uzUpgrade glibc-langpack-ndsUpgrade glibc-langpack-cyUpgrade nscdUpgrade glibc-langpack-lijUpgrade glibc-langpack-kwUpgrade glibc-langpack-ptUpgrade glibc-langpack-boUpgrade glibc-langpack-woUpgrade glibc-langpack-soUpgrade glibc-langpack-nhnUpgrade glibc-langpack-tsUpgrade glibc-langpack-msUpgrade glibc-langpack-neUpgrade glibc-langpack-elUpgrade glibc-langpack-aaUpgrade glibc-langpack-tgUpgrade glibc-langpack-cvUpgrade glibc-langpack-szlUpgrade glibc-langpack-mrUpgrade glibc-langpack-loUpgrade glibc-langpack-ffUpgrade glibc-debuginfoUpgrade glibc-langpack-igUpgrade glibc-langpack-koUpgrade glibc-langpack-sidUpgrade glibc-langpack-afUpgrade glibc-langpack-kkUpgrade glibc-langpack-iaUpgrade glibc-langpack-teUpgrade glibc-langpack-tlUpgrade glibc-langpack-seUpgrade glibc-langpack-enUpgrade glibc-langpack-akUpgrade glibc-langpack-zuUpgrade glibc-all-langpacksUpgrade glibc-langpack-aycUpgrade glibc-langpack-jaUpgrade glibc-langpack-waUpgrade glibc-langpack-idUpgrade glibc-langpack-kokUpgrade glibc-langpack-unmUpgrade glibc-langpack-csbUpgrade libcryptUpgrade glibc-langpack-nnUpgrade glibc-langpack-nbUpgrade glibc-langpack-trUpgrade glibc-langpack-nanUpgrade glibc-langpack-mnUpgrade glibc-langpack-brxUpgrade glibc-langpack-csUpgrade glibc-minimal-langpackUpgrade glibc-langpack-skUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-langpack-guUpgrade glibc-utilsUpgrade glibc-langpack-mlUpgrade glibc-langpack-bemUpgrade glibc-langpack-sdUpgrade glibc-langpack-papUpgrade glibc-langpack-heUpgrade glibc-langpack-deUpgrade glibc-langpack-kuUpgrade glibc-langpack-nlUpgrade glibc-langpack-amUpgrade glibc-langpack-anpUpgrade glibc-langpack-anUpgrade glibc-langpack-hneUpgrade glibc-langpack-hyUpgrade glibc-langpack-swUpgrade glibc-langpack-esUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-lvUpgrade glibc-langpack-tcyUpgrade glibc-langpack-psUpgrade nss_nisUpgrade glibc-langpack-xhUpgrade glibc-langpack-berUpgrade glibc-langpack-satUpgrade glibc-langpack-ocUpgrade glibc-langpack-miUpgrade glibc-langpack-hakUpgrade glibc-langpack-gezUpgrade glibc-langpack-cmnUpgrade glibc-langpack-roUpgrade glibcUpgrade glibc-langpack-frUpgrade glibc-langpack-ttUpgrade glibc-langpack-theUpgrade glibc-langpack-tigUpgrade glibc-langpack-iuUpgrade glibc-langpack-stUpgrade glibc-langpack-paUpgrade glibc-langpack-maiUpgrade glibc-langpack-gvUpgrade glibc-langpack-rwUpgrade glibc-langpack-tkUpgrade glibc-langpack-urUpgrade glibc-langpack-saUpgrade glibc-langpack-lnUpgrade glibc-langpack-kyUpgrade glibc-langpack-isUpgrade glibc-langpack-orUpgrade glibc-langpack-kaUpgrade glibc-langpack-lzhUpgrade glibc-langpack-lgUpgrade glibc-langpack-klUpgrade glibc-commonUpgrade glibc-langpack-itUpgrade glibc-langpack-asUpgrade glibc-langpack-niuUpgrade glibc-langpack-shsUpgrade glibc-langpack-scUpgrade glibc-langpack-zhUpgrade glibc-langpack-nrUpgrade glibc-langpack-siUpgrade glibc-langpack-mg | Apr 27, 2020 | May 18, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | May 18, 2018 |
| Centos_linux | — | Upgrade glibc-staticUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade nscdUpgrade glibc-headersUpgrade glibc-develUpgrade glibcUpgrade glibc-debuginfo-commonUpgrade glibc-common | Aug 28, 2019 | May 18, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | May 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-headersUpgrade glibcUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-static | Dec 4, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-staticUpgrade glibc-develUpgrade glibcUpgrade glibc-headersUpgrade glibc-utilsUpgrade nscdUpgrade glibc-common | Sep 25, 2019 | May 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibcUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscdUpgrade glibc-static | Jun 27, 2019 | May 18, 2018 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-staticUpgrade glibcUpgrade nscd | Nov 6, 2018 | May 17, 2018 |
| Redhat_linux | — | Upgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-debuginfo | Oct 31, 2018 | May 18, 2018 |
| Suse | — | Upgrade glibc-devel-32bitUpgrade glibc-utils-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-profileUpgrade nscdUpgrade glibcUpgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibc-htmlUpgrade glibc-infoUpgrade glibc-profile-32bitUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-devel-static-32bitUpgrade glibc-extraUpgrade glibc-langUpgrade glibc-32bitUpgrade glibc-localeUpgrade glibc-devel-staticUpgrade glibc-utils | Jun 7, 2018 | May 18, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | May 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub