An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-nanUpgrade glibc-langpack-osUpgrade glibc-langpack-haUpgrade glibc-langpack-mhrUpgrade glibc-langpack-gdUpgrade glibc-langpack-crhUpgrade glibc-langpack-skUpgrade glibc-langpack-ffUpgrade glibc-langpack-slUpgrade glibc-langpack-nlUpgrade glibc-langpack-kokUpgrade libcrypt-nssUpgrade glibc-langpack-liUpgrade glibc-develUpgrade glibc-langpack-rwUpgrade glibc-langpack-eoUpgrade glibc-langpack-kaUpgrade glibc-langpack-magUpgrade glibc-langpack-quzUpgrade glibc-langpack-isUpgrade glibc-langpack-stUpgrade glibc-langpack-hyUpgrade glibc-langpack-koUpgrade glibc-langpack-lnUpgrade glibc-langpack-hrUpgrade glibc-langpack-caUpgrade glibc-langpack-hsbUpgrade glibc-langpack-srUpgrade glibc-langpack-waeUpgrade glibc-langpack-ptUpgrade glibc-langpack-tsUpgrade glibc-langpack-huUpgrade glibc-langpack-szlUpgrade glibc-nss-develUpgrade glibc-langpack-omUpgrade glibc-all-langpacksUpgrade glibc-langpack-mniUpgrade glibc-langpack-enUpgrade glibc-langpack-ugUpgrade glibc-staticUpgrade glibc-langpack-tlUpgrade glibc-langpack-soUpgrade glibc-langpack-tiUpgrade glibc-langpack-dzUpgrade glibc-langpack-tigUpgrade glibc-langpack-yoUpgrade glibc-langpack-ndsUpgrade glibc-langpack-arUpgrade glibc-langpack-lvUpgrade glibc-langpack-daUpgrade glibc-langpack-astUpgrade glibc-langpack-glUpgrade glibc-langpack-foUpgrade nss_dbUpgrade glibc-langpack-kyUpgrade glibc-langpack-tcyUpgrade glibc-langpack-bgUpgrade glibc-langpack-bynUpgrade glibc-langpack-mtUpgrade glibc-langpack-mrUpgrade glibc-langpack-taUpgrade glibc-langpack-siUpgrade glibc-langpack-yiUpgrade glibc-headersUpgrade glibc-benchtestsUpgrade glibc-langpack-bhoUpgrade nss_hesiodUpgrade glibc-langpack-mlUpgrade glibc-langpack-lijUpgrade glibc-langpack-thUpgrade glibc-langpack-guUpgrade glibc-langpack-htUpgrade glibc-langpack-heUpgrade glibc-langpack-hneUpgrade glibc-debuginfoUpgrade glibc-langpack-viUpgrade glibc-langpack-mnUpgrade glibc-langpack-bhbUpgrade glibc-langpack-ltUpgrade glibc-langpack-uzUpgrade glibc-langpack-nrUpgrade glibc-langpack-fiUpgrade glibc-locale-sourceUpgrade glibc-langpack-dvUpgrade glibc-langpack-aycUpgrade glibc-langpack-seUpgrade glibc-langpack-hiUpgrade glibc-langpack-urUpgrade glibc-langpack-aaUpgrade glibc-langpack-veUpgrade glibc-langpack-berUpgrade glibc-langpack-kwUpgrade glibc-langpack-sdUpgrade glibc-langpack-plUpgrade glibc-langpack-fyUpgrade glibc-langpack-tnUpgrade glibc-langpack-klUpgrade glibc-langpack-jaUpgrade glibc-langpack-esUpgrade glibc-langpack-amUpgrade glibc-langpack-iaUpgrade glibc-langpack-shsUpgrade glibc-langpack-itUpgrade glibc-langpack-theUpgrade glibc-langpack-lzhUpgrade nss_nisUpgrade glibc-langpack-mgUpgrade glibc-langpack-satUpgrade glibc-langpack-ksUpgrade glibc-langpack-trUpgrade glibc-langpack-asUpgrade glibc-langpack-hakUpgrade glibc-langpack-scUpgrade glibc-langpack-ssUpgrade glibc-langpack-csUpgrade glibc-langpack-idUpgrade glibc-langpack-sidUpgrade glibc-langpack-nsoUpgrade glibc-langpack-neUpgrade glibc-langpack-igUpgrade glibc-langpack-chrUpgrade glibc-langpack-ruUpgrade glibc-langpack-roUpgrade glibc-langpack-doiUpgrade glibc-langpack-akUpgrade glibc-langpack-faUpgrade glibc-langpack-anUpgrade glibc-langpack-cyUpgrade glibc-langpack-brUpgrade glibc-langpack-ukUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-langpack-kkUpgrade glibc-langpack-bemUpgrade glibc-langpack-beUpgrade glibc-langpack-nhnUpgrade glibc-langpack-orUpgrade glibc-langpack-tkUpgrade glibc-langpack-gezUpgrade glibc-langpack-mkUpgrade glibc-langpack-miUpgrade glibc-langpack-lgUpgrade glibc-langpack-iuUpgrade glibc-langpack-anpUpgrade glibc-langpack-bsUpgrade glibc-langpack-kuUpgrade glibc-langpack-brxUpgrade glibc-langpack-nbUpgrade glibc-langpack-woUpgrade glibc-langpack-ttUpgrade glibc-langpack-tgUpgrade glibc-langpack-paUpgrade glibc-langpack-elUpgrade glibc-langpack-sqUpgrade glibc-langpack-loUpgrade glibc-langpack-papUpgrade glibc-langpack-unmUpgrade glibc-langpack-gaUpgrade glibc-langpack-euUpgrade glibc-langpack-ikUpgrade glibc-langpack-xhUpgrade glibc-minimal-langpackUpgrade glibc-langpack-filUpgrade glibc-langpack-teUpgrade glibc-langpack-saUpgrade glibc-langpack-maiUpgrade glibc-langpack-rajUpgrade glibc-langpack-zhUpgrade nscdUpgrade glibc-langpack-yueUpgrade glibc-utilsUpgrade glibc-langpack-ceUpgrade glibc-langpack-walUpgrade glibc-langpack-psUpgrade glibc-langpack-frUpgrade glibc-langpack-cvUpgrade glibc-langpack-kmUpgrade glibc-langpack-ocUpgrade glibc-langpack-nnUpgrade glibc-langpack-knUpgrade glibc-langpack-waUpgrade glibc-langpack-svUpgrade glibc-langpack-swUpgrade glibc-langpack-azUpgrade libcryptUpgrade glibc-langpack-deUpgrade glibc-langpack-niuUpgrade glibc-langpack-afUpgrade glibc-langpack-cmnUpgrade glibc-langpack-msUpgrade glibc-commonUpgrade glibc-langpack-lbUpgrade glibc-langpack-zuUpgrade glibc-langpack-furUpgrade glibc-langpack-csbUpgrade glibc-langpack-boUpgrade glibc-langpack-etUpgrade glibc-langpack-gvUpgrade glibc-langpack-bnUpgrade glibc-langpack-sgsUpgrade glibc-langpack-my | Apr 27, 2020 | Feb 1, 2018 |
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Feb 1, 2018 |
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-debuginfoUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade nscd | Aug 28, 2019 | Feb 1, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Feb 1, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-headersUpgrade glibc | Feb 22, 2019 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade glibc-staticUpgrade nscdUpgrade glibc-commonUpgrade glibc-headersUpgrade glibcUpgrade glibc-devel | Feb 15, 2019 | Feb 1, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-headersUpgrade glibc-develUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-commonUpgrade glibc-utils | Feb 15, 2019 | Feb 1, 2018 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-utils | Nov 6, 2018 | Oct 10, 2017 |
| Redhat_linux | — | Upgrade glibcNo solution existsUpgrade glibc-headersUpgrade glibc-debuginfo-commonUpgrade nscdUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-utils | Oct 31, 2018 | Feb 1, 2018 |
| Suse | — | Upgrade glibc-localeUpgrade glibc-locale-base-32bitUpgrade glibc-locale-32bitUpgrade glibcUpgrade glibc-langUpgrade glibc-profile-x86Upgrade glibc-locale-baseUpgrade nscdUpgrade glibc-profileUpgrade glibc-devel-32bitUpgrade glibc-htmlUpgrade glibc-utilsUpgrade glibc-32bitUpgrade glibc-develUpgrade glibc-locale-x86Upgrade glibc-profile-32bitUpgrade glibc-infoUpgrade glibc-extraUpgrade glibc-x86Upgrade glibc-i18ndataUpgrade glibc-devel-static | Feb 16, 2018 | Feb 1, 2018 |
| Ubuntu | — | Upgrade libc6Upgrade libc6 (Ubuntu Pro) | Dec 11, 2019 | Feb 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub