The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibc | Jul 30, 2024 | Jan 18, 2019 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Jun 15, 2020 | Jan 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glibc-langpack-lijUpgrade glibc-langpack-osUpgrade glibc-langpack-ltUpgrade glibc-langpack-ugUpgrade glibc-langpack-lbUpgrade glibc-langpack-nbUpgrade glibc-langpack-nhnUpgrade glibc-langpack-ruUpgrade glibc-langpack-ukUpgrade glibc-langpack-srUpgrade glibc-langpack-yuwUpgrade glibc-langpack-biUpgrade glibc-langpack-bnUpgrade glibc-langpack-chrUpgrade glibc-langpack-sahUpgrade glibc-langpack-gvUpgrade glibc-langpack-hiUpgrade glibc-locale-sourceUpgrade glibc-langpack-huUpgrade glibc-langpack-ikUpgrade glibc-langpack-omUpgrade glibc-langpack-daUpgrade glibc-langpack-furUpgrade nscdUpgrade glibc-langpack-htUpgrade glibc-langpack-kwUpgrade glibc-langpack-liUpgrade glibc-langpack-paUpgrade glibc-langpack-viUpgrade glibc-langpack-bsUpgrade glibc-langpack-plUpgrade glibc-langpack-kmUpgrade glibc-langpack-ptUpgrade glibc-langpack-etUpgrade glibc-langpack-nsoUpgrade glibc-langpack-quzUpgrade glibc-langpack-svUpgrade glibc-langpack-dvUpgrade glibc-langpack-koUpgrade glibc-langpack-boUpgrade glibc-langpack-mnUpgrade glibc-langpack-yueUpgrade glibc-langpack-asUpgrade glibc-langpack-ksUpgrade glibc-langpack-doiUpgrade glibc-langpack-walUpgrade glibc-langpack-bynUpgrade glibc-langpack-azUpgrade glibc-langpack-fiUpgrade glibc-langpack-filUpgrade glibc-langpack-fyUpgrade glibc-langpack-magUpgrade glibc-langpack-myUpgrade glibc-langpack-taUpgrade glibc-langpack-tgUpgrade glibc-langpack-miqUpgrade glibc-langpack-tiUpgrade glibc-langpack-ocUpgrade glibc-langpack-crhUpgrade glibc-langpack-sgsUpgrade glibc-langpack-arUpgrade glibc-langpack-eoUpgrade glibc-langpack-sqUpgrade glibc-langpack-astUpgrade glibc-langpack-mfeUpgrade glibc-langpack-bgUpgrade glibc-langpack-mjwUpgrade glibc-langpack-mkUpgrade glibc-langpack-slUpgrade glibc-langpack-mniUpgrade glibc-langpack-glUpgrade glibc-langpack-msUpgrade glibc-langpack-knUpgrade glibc-langpack-neUpgrade glibc-langpack-satUpgrade glibc-langpack-bhbUpgrade glibc-langpack-smUpgrade glibc-langpack-ssUpgrade libnslUpgrade nss_dbUpgrade glibc-langpack-foUpgrade nss_hesiodUpgrade glibc-staticUpgrade glibc-langpack-maiUpgrade glibc-langpack-mtUpgrade glibc-langpack-tlUpgrade glibc-langpack-trUpgrade glibc-langpack-thUpgrade glibc-langpack-woUpgrade glibc-headersUpgrade glibc-langpack-lzhUpgrade glibc-langpack-rajUpgrade glibc-langpack-kabUpgrade glibc-langpack-ceUpgrade glibc-langpack-iuUpgrade glibc-langpack-niuUpgrade glibc-langpack-soUpgrade glibc-langpack-beUpgrade glibc-langpack-dsbUpgrade glibc-langpack-faUpgrade glibc-langpack-gdUpgrade glibc-langpack-hifUpgrade glibc-langpack-hsbUpgrade glibc-langpack-scUpgrade glibc-langpack-zhUpgrade glibc-langpack-shnUpgrade glibc-langpack-nrUpgrade glibc-langpack-mrUpgrade glibc-langpack-gaUpgrade glibc-langpack-caUpgrade glibc-langpack-deUpgrade glibc-langpack-itUpgrade glibc-langpack-ttUpgrade glibc-langpack-skUpgrade glibc-langpack-roUpgrade glibc-langpack-szlUpgrade glibc-utilsUpgrade glibc-langpack-cvUpgrade glibc-langpack-unmUpgrade glibc-langpack-tsUpgrade glibc-langpack-tnUpgrade glibc-langpack-kuUpgrade glibc-langpack-hakUpgrade glibc-langpack-dzUpgrade glibc-langpack-agrUpgrade glibc-langpack-afUpgrade glibc-langpack-aaUpgrade glibc-langpack-seUpgrade glibc-langpack-ndsUpgrade glibc-langpack-mgUpgrade glibc-langpack-loUpgrade glibc-langpack-idUpgrade glibc-langpack-theUpgrade glibc-langpack-tcyUpgrade glibc-langpack-shsUpgrade glibc-langpack-ffUpgrade glibc-langpack-anpUpgrade glibc-langpack-cyUpgrade glibc-develUpgrade glibc-langpack-xhUpgrade glibc-langpack-anUpgrade glibc-langpack-waeUpgrade glibc-langpack-tpiUpgrade glibc-langpack-tigUpgrade glibc-langpack-teUpgrade glibc-langpack-swUpgrade glibc-langpack-nnUpgrade glibc-langpack-mlUpgrade glibc-langpack-lnUpgrade glibc-langpack-kokUpgrade glibc-langpack-yiUpgrade glibc-langpack-isUpgrade glibc-langpack-igUpgrade glibc-langpack-hneUpgrade glibc-langpack-zuUpgrade glibcUpgrade glibc-langpack-heUpgrade glibc-langpack-frUpgrade glibc-langpack-saUpgrade glibc-langpack-sdUpgrade glibc-langpack-kaUpgrade glibc-langpack-euUpgrade glibc-all-langpacksUpgrade glibc-langpack-csbUpgrade glibc-commonUpgrade glibc-langpack-haUpgrade glibc-langpack-gezUpgrade glibc-langpack-uzUpgrade glibc-langpack-nlUpgrade glibc-langpack-nanUpgrade glibc-langpack-kkUpgrade glibc-langpack-enUpgrade glibc-langpack-csUpgrade glibc-langpack-bemUpgrade glibc-langpack-amUpgrade glibc-langpack-akUpgrade glibc-langpack-veUpgrade glibc-langpack-yoUpgrade glibc-langpack-mhrUpgrade glibc-langpack-lgUpgrade glibc-langpack-guUpgrade glibc-langpack-elUpgrade glibc-langpack-cmnUpgrade glibc-langpack-brxUpgrade glibc-langpack-brUpgrade glibc-langpack-waUpgrade glibc-langpack-urUpgrade glibc-langpack-toUpgrade glibc-langpack-rwUpgrade glibc-langpack-orUpgrade glibc-langpack-lvUpgrade glibc-langpack-klUpgrade glibc-langpack-papUpgrade glibc-langpack-berUpgrade glibc-minimal-langpackUpgrade glibc-langpack-psUpgrade glibc-langpack-tkUpgrade glibc-langpack-sidUpgrade glibc-langpack-miUpgrade glibc-langpack-jaUpgrade glibc-langpack-iaUpgrade glibc-langpack-hrUpgrade glibc-langpack-esUpgrade glibc-langpack-bhoUpgrade glibc-langpack-aycUpgrade glibc-langpack-kyUpgrade glibc-langpack-hyUpgrade glibc-langpack-stUpgrade glibc-langpack-si | Jan 3, 2020 | Jan 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub