glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Jul 1, 2017 | Jun 19, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 19, 2017 |
| Centos_linux | — | Upgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-develUpgrade glibc-utils | Jun 21, 2017 | Jun 19, 2017 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jun 20, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade nscdUpgrade glibc-static | Nov 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-staticUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade nscdUpgrade glibcUpgrade glibc-headers | Nov 30, 2017 | Jun 19, 2017 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-utils | Jun 21, 2017 | Jun 19, 2017 |
| Redhat_linux | — | Upgrade glibc-debuginfoUpgrade glibc-utilsNo solution existsUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibcUpgrade nscd | Jul 1, 2017 | Jun 19, 2017 |
| Suse | — | Upgrade glibcUpgrade sles12sp1-docker-imageUpgrade glibc-locale-32bitUpgrade glibc-utilsUpgrade glibc-infoUpgrade sles12sp2-docker-imageUpgrade glibc-profile-x86Upgrade glibc-devel-32bitUpgrade glibc-langUpgrade glibc-profile-32bitUpgrade nscdUpgrade sles12-docker-imageUpgrade glibc-locale-baseUpgrade glibc-develUpgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-x86Upgrade glibc-extraUpgrade glibc-profileUpgrade glibc-localeUpgrade glibc-htmlUpgrade glibc-devel-staticUpgrade glibc-32bitUpgrade glibc-locale-base-32bit | Jun 20, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade libc6 | Jun 19, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub