The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-mgUpgrade glibc-langpack-scUpgrade glibc-langpack-itUpgrade glibc-langpack-psUpgrade glibc-langpack-ruUpgrade glibc-langpack-ttUpgrade glibc-langpack-koUpgrade glibc-langpack-cvUpgrade glibc-debuginfoUpgrade glibc-langpack-cmnUpgrade glibc-langpack-zhUpgrade glibc-langpack-msUpgrade glibc-langpack-swUpgrade glibc-langpack-furUpgrade nss_nisUpgrade glibc-langpack-kkUpgrade glibc-langpack-anUpgrade glibc-langpack-roUpgrade glibc-langpack-theUpgrade glibc-commonUpgrade glibc-langpack-ikUpgrade glibc-langpack-orUpgrade glibc-langpack-nsoUpgrade glibc-langpack-nbUpgrade glibc-langpack-woUpgrade nscdUpgrade glibc-langpack-papUpgrade glibc-langpack-tlUpgrade glibc-langpack-gvUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-afUpgrade glibc-langpack-azUpgrade glibc-langpack-svUpgrade glibc-langpack-rajUpgrade glibc-langpack-csbUpgrade glibc-langpack-ffUpgrade glibc-langpack-tigUpgrade glibc-langpack-brxUpgrade glibc-langpack-satUpgrade glibc-langpack-beUpgrade glibcUpgrade glibc-langpack-skUpgrade glibc-langpack-trUpgrade glibc-langpack-iuUpgrade glibc-langpack-mlUpgrade glibc-langpack-idUpgrade glibc-langpack-waUpgrade glibc-langpack-mnUpgrade glibc-langpack-sidUpgrade glibc-langpack-frUpgrade glibc-langpack-kmUpgrade glibc-langpack-tcyUpgrade glibc-langpack-shsUpgrade glibc-langpack-mkUpgrade glibc-langpack-loUpgrade glibc-langpack-nnUpgrade glibc-langpack-nrUpgrade glibc-langpack-akUpgrade glibc-langpack-gezUpgrade glibc-langpack-ocUpgrade glibc-langpack-chrUpgrade glibc-langpack-deUpgrade glibc-langpack-nhnUpgrade glibc-langpack-neUpgrade glibc-langpack-saUpgrade glibc-langpack-filUpgrade glibc-langpack-ndsUpgrade glibc-utilsUpgrade glibc-langpack-lgUpgrade glibc-langpack-xhUpgrade glibc-langpack-yueUpgrade glibc-langpack-ksUpgrade glibc-langpack-ukUpgrade glibc-langpack-lzhUpgrade glibc-langpack-lbUpgrade glibc-langpack-igUpgrade libcryptUpgrade glibc-langpack-csUpgrade glibc-langpack-niuUpgrade glibc-langpack-zuUpgrade glibc-langpack-kuUpgrade glibc-langpack-unmUpgrade glibc-langpack-myUpgrade glibc-langpack-ceUpgrade glibc-langpack-bsUpgrade glibc-minimal-langpackUpgrade glibc-langpack-faUpgrade glibc-langpack-bnUpgrade glibc-langpack-maiUpgrade glibc-langpack-anpUpgrade glibc-langpack-knUpgrade glibc-langpack-bemUpgrade glibc-langpack-miUpgrade glibc-langpack-teUpgrade glibc-langpack-hakUpgrade glibc-langpack-tkUpgrade glibc-staticUpgrade glibc-langpack-sgsUpgrade glibc-langpack-siUpgrade glibc-langpack-ssUpgrade glibc-langpack-szlUpgrade glibc-langpack-hsbUpgrade glibc-langpack-waeUpgrade glibc-langpack-dvUpgrade glibc-langpack-omUpgrade glibc-langpack-taUpgrade glibc-langpack-ptUpgrade glibc-langpack-fiUpgrade glibc-langpack-gaUpgrade glibc-langpack-mhrUpgrade glibc-langpack-sdUpgrade glibc-langpack-kokUpgrade glibc-langpack-veUpgrade glibc-langpack-hiUpgrade glibc-langpack-htUpgrade glibc-langpack-paUpgrade glibc-langpack-huUpgrade glibc-langpack-uzUpgrade nss_hesiodUpgrade glibc-langpack-walUpgrade glibc-langpack-osUpgrade glibc-langpack-aycUpgrade glibc-langpack-nanUpgrade glibc-langpack-ugUpgrade glibc-langpack-amUpgrade glibc-langpack-sqUpgrade glibc-langpack-plUpgrade glibc-langpack-liUpgrade glibc-langpack-elUpgrade glibc-locale-sourceUpgrade glibc-langpack-tsUpgrade glibc-langpack-aaUpgrade glibc-langpack-mrUpgrade glibc-langpack-seUpgrade glibc-langpack-yiUpgrade glibc-langpack-doiUpgrade glibc-langpack-kwUpgrade glibc-langpack-magUpgrade glibc-langpack-asUpgrade glibc-langpack-bgUpgrade glibc-langpack-tiUpgrade glibc-langpack-daUpgrade glibc-langpack-bhoUpgrade glibc-langpack-enUpgrade glibc-headersUpgrade glibc-langpack-haUpgrade glibc-langpack-slUpgrade glibc-langpack-berUpgrade glibc-langpack-caUpgrade glibc-langpack-fyUpgrade glibc-langpack-guUpgrade glibc-langpack-brUpgrade glibc-langpack-glUpgrade glibc-langpack-eoUpgrade glibc-langpack-hneUpgrade glibc-langpack-nlUpgrade glibc-langpack-soUpgrade glibc-langpack-srUpgrade glibc-langpack-tgUpgrade glibc-langpack-etUpgrade glibc-langpack-lnUpgrade glibc-langpack-bynUpgrade glibc-langpack-kaUpgrade glibc-langpack-kyUpgrade glibc-langpack-cyUpgrade glibc-langpack-rwUpgrade glibc-langpack-boUpgrade glibc-nss-develUpgrade glibc-develUpgrade glibc-langpack-thUpgrade glibc-langpack-bhbUpgrade glibc-langpack-lvUpgrade libcrypt-nssUpgrade glibc-langpack-tnUpgrade nss_dbUpgrade glibc-langpack-mtUpgrade glibc-langpack-euUpgrade glibc-langpack-astUpgrade glibc-langpack-esUpgrade glibc-langpack-dzUpgrade glibc-langpack-hrUpgrade glibc-langpack-viUpgrade glibc-langpack-heUpgrade glibc-langpack-foUpgrade glibc-langpack-isUpgrade glibc-langpack-lijUpgrade glibc-langpack-mniUpgrade glibc-langpack-crhUpgrade glibc-langpack-iaUpgrade glibc-langpack-klUpgrade glibc-langpack-jaUpgrade glibc-langpack-arUpgrade glibc-benchtestsUpgrade glibc-all-langpacksUpgrade glibc-langpack-urUpgrade glibc-langpack-gdUpgrade glibc-langpack-yoUpgrade glibc-langpack-stUpgrade glibc-langpack-quzUpgrade glibc-langpack-hyUpgrade glibc-langpack-lt | Nov 10, 2022 | Mar 20, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Mar 20, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 25, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Aug 16, 2019 | Mar 20, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2015 |
| Suse | — | Upgrade glibc-i18ndataUpgrade glibcUpgrade glibc-localeUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-devel-staticUpgrade glibc-utilsUpgrade glibc-locale-base-32bitUpgrade glibc-extraUpgrade glibc-32bitUpgrade nscdUpgrade glibc-info | Mar 15, 2022 | Mar 20, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub