An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-lbUpgrade glibc-langpack-cvUpgrade nss_nisUpgrade glibc-langpack-lzhUpgrade glibc-langpack-bemUpgrade glibc-langpack-ruUpgrade glibc-langpack-boUpgrade glibc-langpack-sidUpgrade glibc-langpack-nsoUpgrade glibc-langpack-tkUpgrade glibc-commonUpgrade glibc-langpack-papUpgrade glibc-langpack-msUpgrade glibc-langpack-satUpgrade glibc-langpack-furUpgrade glibc-langpack-cmnUpgrade glibc-langpack-unmUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-csbUpgrade glibc-langpack-csUpgrade glibc-langpack-theUpgrade glibc-langpack-neUpgrade glibc-langpack-beUpgrade glibcUpgrade glibc-langpack-orUpgrade glibc-langpack-filUpgrade glibc-langpack-azUpgrade glibc-langpack-loUpgrade glibc-langpack-sqUpgrade glibc-langpack-ssUpgrade glibc-langpack-svUpgrade glibc-langpack-waUpgrade glibc-langpack-xhUpgrade glibc-langpack-niuUpgrade glibc-langpack-afUpgrade glibc-minimal-langpackUpgrade glibc-langpack-deUpgrade glibc-langpack-cyUpgrade glibc-langpack-nbUpgrade glibc-langpack-miUpgrade glibc-langpack-ukUpgrade glibc-langpack-idUpgrade glibc-langpack-ikUpgrade glibc-langpack-brUpgrade glibc-langpack-swUpgrade glibc-langpack-maiUpgrade glibc-langpack-chrUpgrade glibc-langpack-bsUpgrade glibc-langpack-ttUpgrade glibc-langpack-zhUpgrade glibc-langpack-anpUpgrade glibc-langpack-iuUpgrade libcryptUpgrade glibc-langpack-gaUpgrade glibc-langpack-saUpgrade glibc-langpack-ksUpgrade glibc-langpack-walUpgrade glibc-langpack-mgUpgrade glibc-langpack-asUpgrade glibc-langpack-psUpgrade glibc-langpack-doiUpgrade glibc-langpack-knUpgrade glibc-langpack-roUpgrade glibc-langpack-gezUpgrade glibc-langpack-frUpgrade glibc-langpack-woUpgrade glibc-langpack-zuUpgrade glibc-langpack-anUpgrade glibc-langpack-igUpgrade glibc-langpack-etUpgrade glibc-langpack-scUpgrade glibc-langpack-hakUpgrade glibc-langpack-teUpgrade glibc-langpack-ceUpgrade glibc-langpack-sgsUpgrade glibc-langpack-faUpgrade glibc-langpack-gvUpgrade glibc-langpack-euUpgrade glibc-langpack-myUpgrade glibc-langpack-kuUpgrade glibc-langpack-yueUpgrade glibc-langpack-lgUpgrade glibc-langpack-shsUpgrade glibc-langpack-kkUpgrade glibc-langpack-ocUpgrade glibc-langpack-itUpgrade glibc-utilsUpgrade glibc-langpack-bnUpgrade glibc-langpack-nnUpgrade glibc-langpack-tgUpgrade glibc-langpack-paUpgrade glibc-langpack-mkUpgrade glibc-langpack-akUpgrade glibc-langpack-kmUpgrade glibc-langpack-elUpgrade glibc-langpack-nhnUpgrade glibc-langpack-brxUpgrade glibc-langpack-rajUpgrade nscdUpgrade glibc-langpack-trUpgrade glibc-langpack-sdUpgrade glibc-langpack-hsbUpgrade glibc-langpack-srUpgrade glibc-langpack-kwUpgrade glibc-langpack-enUpgrade glibc-langpack-mniUpgrade glibc-langpack-uzUpgrade glibc-langpack-szlUpgrade glibc-langpack-ugUpgrade glibc-langpack-mrUpgrade nss_dbUpgrade glibc-langpack-quzUpgrade glibc-langpack-htUpgrade glibc-langpack-fiUpgrade glibc-langpack-urUpgrade glibc-langpack-mtUpgrade glibc-langpack-klUpgrade nss_hesiodUpgrade glibc-langpack-esUpgrade glibc-langpack-amUpgrade glibc-langpack-kokUpgrade glibc-langpack-aaUpgrade glibc-langpack-kaUpgrade glibc-langpack-hyUpgrade glibc-develUpgrade glibc-langpack-isUpgrade glibc-langpack-magUpgrade glibc-langpack-rwUpgrade glibc-langpack-stUpgrade glibc-langpack-slUpgrade glibc-langpack-nlUpgrade glibc-langpack-liUpgrade glibc-langpack-gdUpgrade glibc-langpack-jaUpgrade glibc-langpack-fyUpgrade glibc-langpack-bgUpgrade glibc-langpack-yiUpgrade glibc-langpack-ltUpgrade glibc-langpack-viUpgrade glibc-langpack-thUpgrade glibc-langpack-hneUpgrade glibc-langpack-guUpgrade glibc-headersUpgrade glibc-langpack-bhbUpgrade glibc-langpack-mlUpgrade glibc-benchtestsUpgrade glibc-langpack-bynUpgrade glibc-langpack-yoUpgrade glibc-langpack-tcyUpgrade glibc-langpack-huUpgrade glibc-langpack-eoUpgrade glibc-langpack-caUpgrade glibc-langpack-hiUpgrade glibc-langpack-kyUpgrade glibc-langpack-ffUpgrade glibc-langpack-aycUpgrade glibc-langpack-tnUpgrade glibc-langpack-skUpgrade glibc-nss-develUpgrade glibc-langpack-plUpgrade glibc-locale-sourceUpgrade glibc-all-langpacksUpgrade glibc-langpack-bhoUpgrade glibc-langpack-arUpgrade glibc-langpack-nanUpgrade glibc-langpack-tigUpgrade glibc-langpack-osUpgrade glibc-langpack-soUpgrade glibc-langpack-berUpgrade glibc-langpack-mhrUpgrade glibc-langpack-ndsUpgrade glibc-langpack-tiUpgrade glibc-langpack-nrUpgrade glibc-langpack-ptUpgrade glibc-langpack-lvUpgrade glibc-debuginfoUpgrade glibc-langpack-taUpgrade glibc-langpack-crhUpgrade glibc-langpack-astUpgrade glibc-langpack-haUpgrade glibc-langpack-daUpgrade glibc-langpack-tlUpgrade glibc-staticUpgrade glibc-langpack-koUpgrade libcrypt-nssUpgrade glibc-langpack-iaUpgrade glibc-langpack-hrUpgrade glibc-langpack-lnUpgrade glibc-langpack-tsUpgrade glibc-langpack-waeUpgrade glibc-langpack-heUpgrade glibc-langpack-veUpgrade glibc-langpack-dvUpgrade glibc-langpack-dzUpgrade glibc-langpack-glUpgrade glibc-langpack-foUpgrade glibc-langpack-siUpgrade glibc-langpack-seUpgrade glibc-langpack-omUpgrade glibc-langpack-lijUpgrade glibc-langpack-mn | Apr 27, 2020 | Feb 1, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Feb 1, 2018 |
| Centos_linux | — | Upgrade glibc-headersUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-debuginfo-commonUpgrade nscdUpgrade glibc | Aug 28, 2019 | Feb 1, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Feb 1, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-commonUpgrade glibc-staticUpgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-devel | Feb 22, 2019 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nscdUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-common | Feb 15, 2019 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-develUpgrade nscdUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-common | Feb 15, 2019 | Feb 1, 2018 |
| Oracle_linux | — | Upgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibcUpgrade glibc-develUpgrade glibc-common | Nov 6, 2018 | Oct 10, 2017 |
| Redhat_linux | — | Upgrade glibcUpgrade glibc-headersNo solution existsUpgrade glibc-debuginfo-commonUpgrade nscdUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-devel | Oct 31, 2018 | Feb 1, 2018 |
| Suse | — | Upgrade glibc-i18ndataUpgrade glibc-devel-staticUpgrade glibc-x86Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-htmlUpgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-profile-32bitUpgrade glibc-infoUpgrade glibc-locale-x86Upgrade glibc-locale-baseUpgrade glibc-locale-base-32bitUpgrade glibcUpgrade glibc-locale-32bitUpgrade glibc-localeUpgrade glibc-profileUpgrade nscdUpgrade glibc-profile-x86Upgrade glibc-langUpgrade glibc-devel-32bit | Feb 16, 2018 | Feb 1, 2018 |
| Ubuntu | — | Upgrade libc6Upgrade libc6 (Ubuntu Pro) | Dec 11, 2019 | Feb 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub