* * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-23219	120	DoS Exec Code Overflow	2022-01-14	2022-01-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
2	CVE-2022-23218	120	DoS Exec Code Overflow	2022-01-14	2022-01-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
3	CVE-2021-38604	476		2021-08-12	2021-10-07	5.0	None	Remote	Low	Not required	None	None	Partial
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.
4	CVE-2021-35942	190	DoS	2021-07-22	2021-09-21	6.4	None	Remote	Low	Not required	Partial	None	Partial
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.
5	CVE-2021-27645	415	DoS	2021-02-24	2021-07-06	1.9	None	Local	Medium	Not required	None	None	Partial
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
6	CVE-2021-3326	617	DoS	2021-01-27	2022-04-20	5.0	None	Remote	Low	Not required	None	None	Partial
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
7	CVE-2020-29562	617	DoS	2020-12-04	2021-03-19	2.1	None	Remote	High	???	None	None	Partial
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
8	CVE-2020-27618	835	DoS	2021-02-26	2022-05-12	2.1	None	Local	Low	Not required	None	None	Partial
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.
9	CVE-2020-10029	787	Overflow	2020-03-04	2022-04-27	2.1	None	Local	Low	Not required	None	None	Partial
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.
10	CVE-2020-6096	191	Exec Code	2020-04-01	2022-05-12	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.
11	CVE-2020-1752	416	Exec Code	2020-04-30	2021-12-15	3.7	None	Local	High	Not required	Partial	Partial	Partial
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.
12	CVE-2020-1751	787	DoS Exec Code	2020-04-17	2020-07-09	5.9	None	Local	Medium	Not required	Partial	Partial	Complete
An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.
13	CVE-2019-25013	125		2021-01-04	2022-04-20	7.1	None	Remote	Medium	Not required	None	None	Complete
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
14	CVE-2019-9192	674		2019-02-26	2020-08-24	5.0	None	Remote	Low	Not required	None	None	Partial
DISPUTED In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern.
15	CVE-2019-9169	125		2019-02-26	2022-04-20	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
16	CVE-2019-6488	404		2019-01-18	2020-06-13	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy.
17	CVE-2018-1000001	787	Exec Code	2018-01-31	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
18	CVE-2018-20796	674		2019-02-26	2019-11-05	5.0	None	Remote	Low	Not required	None	None	Partial
In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227\|)(\\1\\1\|t1\|\\\2537)+' in grep.
19	CVE-2018-19591	20		2018-12-04	2020-07-09	5.0	None	Remote	Low	Not required	None	None	Partial
In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
20	CVE-2018-11237	787	Overflow	2018-05-18	2020-08-24	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
21	CVE-2018-11236	787	Exec Code Overflow	2018-05-18	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
22	CVE-2018-6551	787		2018-02-02	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.
23	CVE-2018-6485	787	Overflow	2018-02-01	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
24	CVE-2017-1000366	119	Exec Code Overflow	2017-06-19	2020-10-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
25	CVE-2017-15804	119	Overflow	2017-10-22	2018-06-20	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
26	CVE-2017-15671	772	DoS	2017-10-20	2019-10-03	4.3	None	Remote	Medium	Not required	None	None	Partial
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).
27	CVE-2017-15670	119	Overflow	2017-10-20	2018-06-20	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
28	CVE-2017-12133	416		2017-09-07	2020-07-09	4.3	None	Remote	Medium	Not required	None	Partial	None
Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.
29	CVE-2017-12132	770		2017-08-01	2019-10-03	4.3	None	Remote	Medium	Not required	None	Partial	None
The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
30	CVE-2016-10739	20		2019-01-21	2019-08-06	4.6	None	Local	Low	Not required	Partial	Partial	Partial
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.
31	CVE-2016-10228	20	DoS	2017-03-02	2022-04-20	4.3	None	Remote	Medium	Not required	None	None	Partial
The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
32	CVE-2016-6323	284	DoS	2016-10-07	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
33	CVE-2016-5417	399	DoS	2017-02-17	2017-02-17	5.0	None	Remote	Low	Not required	None	None	Partial
Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures.
34	CVE-2016-4429	787	DoS Overflow	2016-06-10	2021-07-20	4.3	None	Remote	Medium	Not required	None	None	Partial
Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
35	CVE-2016-3706	20	DoS Overflow	2016-06-10	2020-10-29	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to cause a denial of service (crash) via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4458.
36	CVE-2016-3075	119	DoS Overflow	2016-06-01	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a long name.
37	CVE-2016-1234	119	DoS Overflow	2016-06-01	2021-09-01	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name.
38	CVE-2015-8985	19	DoS	2017-03-20	2020-03-31	4.3	None	Remote	Medium	Not required	None	None	Partial
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
39	CVE-2015-8984	125	DoS	2017-03-20	2017-03-22	4.3	None	Remote	Medium	Not required	None	None	Partial
The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash) via a malformed pattern, which triggers an out-of-bounds read.
40	CVE-2015-8983	190	DoS Exec Code Overflow	2017-03-20	2017-03-22	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.
41	CVE-2015-8982	190	DoS Exec Code Overflow	2017-03-15	2021-06-29	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
42	CVE-2015-8779	119	DoS Exec Code Overflow	2016-04-19	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
43	CVE-2015-8778	119	DoS Exec Code Overflow	2016-04-19	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
44	CVE-2015-8777	254	Bypass	2016-01-20	2018-01-05	2.1	None	Local	Low	Not required	None	Partial	None
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
45	CVE-2015-8776	189	DoS +Info	2016-04-19	2018-10-30	6.4	None	Remote	Low	Not required	Partial	None	Partial
The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
46	CVE-2015-5277	119	DoS Overflow +Priv	2015-12-17	2017-07-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.
47	CVE-2015-5180	476	DoS	2017-06-27	2018-04-12	5.0	None	Remote	Low	Not required	None	None	Partial
res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).
48	CVE-2015-1781	119	DoS Exec Code Overflow	2015-09-28	2019-06-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
49	CVE-2015-1473	119	DoS Overflow	2015-04-08	2016-11-28	6.4	None	Remote	Low	Not required	None	Partial	Partial
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during a risk-management decision for use of the alloca function, which might allow context-dependent attackers to cause a denial of service (segmentation violation) or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.
50	CVE-2015-1472	119	DoS Overflow	2015-04-08	2019-06-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call.

Total number of vulnerabilities : 94 Page : 1 (This Page)2