glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Jul 1, 2017 | Jun 19, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 19, 2017 |
| Centos_linux | — | Upgrade glibc-staticUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade glibc-debuginfo-common | Jun 21, 2017 | Jun 19, 2017 |
| Debian | — | Upgrade eglibcUpgrade glibc | Jun 20, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-utilsUpgrade glibcUpgrade glibc-headersUpgrade nscdUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-devel | Nov 30, 2017 | Jun 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade nscdUpgrade glibc-headersUpgrade glibc | Nov 30, 2017 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-devel | Jun 21, 2017 | Jun 19, 2017 |
| Redhat_linux | — | Upgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-staticNo solution existsUpgrade glibc-headersUpgrade glibcUpgrade glibc-debuginfo-commonUpgrade glibc-develUpgrade nscd | Jul 1, 2017 | Jun 19, 2017 |
| Suse | — | Upgrade glibc-extraUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-32bitUpgrade glibc-x86Upgrade glibc-localeUpgrade glibc-locale-baseUpgrade glibc-htmlUpgrade glibc-devel-staticUpgrade glibc-locale-x86Upgrade glibc-locale-base-32bitUpgrade glibc-i18ndataUpgrade glibc-locale-32bitUpgrade glibc-profile-32bitUpgrade glibc-infoUpgrade nscdUpgrade sles12sp2-docker-imageUpgrade glibc-langUpgrade glibc-utilsUpgrade sles12-docker-imageUpgrade glibcUpgrade sles12sp1-docker-imageUpgrade glibc-profile-x86Upgrade glibc-devel-32bit | Jun 20, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade libc6 | Jun 19, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub