Glibc (Gnu) - vulnerabilities (CVEs)

163 CVEs, 0 in the last 30 days, 199 known versions, newest CVE from 2026-04-28. Vendor: Gnu.

CVEs of Glibc

CVE-2026-6238 - CVSS 6.5 (medium), 2026-04-28: The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against…
CVE-2026-5435 - CVSS 7.3 (high), 2026-04-28: The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length,…
CVE-2026-5928 - CVSS 7.5 (high), 2026-04-20: Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte…
CVE-2026-5450 - CVSS 9.8 (critical), 2026-04-20: Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier…
CVE-2026-4046 - CVSS 7.5 (high), 2026-03-30: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399…
CVE-2026-4438 - CVSS 5.4 (medium), 2026-03-20: Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version…
CVE-2026-4437 - CVSS 7.5 (high), 2026-03-20: Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version…
CVE-2026-3904 - CVSS 6.2 (medium), 2026-03-11: Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…
CVE-2025-15281 - CVSS 7.5 (high), 2026-01-20: Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return…
CVE-2026-0915 - CVSS 7.5 (high), 2026-01-15: Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued…
CVE-2026-0861 - CVSS 8.4 (high), 2026-01-14: Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may…
CVE-2025-5745 - CVSS 5.6 (medium), 2025-06-05: The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without…
CVE-2025-5702 - CVSS 5.6 (medium), 2025-06-05: The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving…
CVE-2025-4802 - CVSS 7.8 (high), 2025-05-16: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically…
CVE-2024-33599 - CVSS 8.1 (high), 2024-05-06: nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a…
CVE-2024-33602 - CVSS 7.4 (high), 2024-05-06: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS…
CVE-2024-33601 - CVSS 7.3 (high), 2024-05-06: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and…
CVE-2024-33600 - CVSS 5.9 (medium), 2024-05-06: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache,…
CVE-2024-2961 - CVSS 7.3 (high), 2024-04-17: The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the…
CVE-2023-6779 - CVSS 8.2 (high), 2024-01-31: An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog…
CVE-2023-6246 - CVSS 8.4 (high), 2024-01-31: A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions.…
CVE-2023-6780 - CVSS 5.3 (medium), 2024-01-31: An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-5156 - CVSS 7.5 (high), 2023-09-25: A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
CVE-2023-4806 - CVSS 5.9 (medium), 2023-09-18: A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an…
CVE-2023-4527 - CVSS 6.5 (medium), 2023-09-18: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via…
CVE-2023-4813 - CVSS 5.9 (medium), 2023-09-12: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.…
CVE-2015-20109 - CVSS 5.5 (medium), 2023-06-25: end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of…
CVE-2023-0687 - CVSS 9.8 (critical), 2023-02-06: A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of…
CVE-2023-25139 - CVSS 9.8 (critical), 2023-02-03: sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to…
CVE-2022-39046 - CVSS 7.5 (high), 2022-08-31: An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads…
CVE-2021-3999 - CVSS 7.8 (high), 2022-08-24: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A…
CVE-2021-3998 - CVSS 7.5 (high), 2022-08-24: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of…
CVE-2022-23219 - CVSS 9.8 (critical), 2022-01-14: The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack…
CVE-2022-23218 - CVSS 9.8 (critical), 2022-01-14: The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack…
CVE-2021-43396 - CVSS 7.5 (high), 2021-11-04: In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted…
CVE-2021-38604 - CVSS 7.5 (high), 2021-08-12: In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer…
CVE-2021-35942 - CVSS 9.1 (critical), 2021-07-22: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an…
CVE-2021-33574 - CVSS 9.8 (critical), 2021-05-25: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object…
CVE-2020-27618 - CVSS 5.5 (medium), 2021-02-26: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371,…
CVE-2021-27645 - CVSS 2.5 (low), 2021-02-24: The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due…
CVE-2021-3326 - CVSS 7.5 (high), 2021-01-27: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an…
CVE-2019-25013 - CVSS 5.9 (medium), 2021-01-04: The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have…
CVE-2020-29573 - CVSS 7.5 (high), 2020-12-06: sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the…
CVE-2020-29562 - CVSS 4.8 (medium), 2020-12-04: The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion…
CVE-1999-0199 - CVSS 9.8 (critical), 2020-10-06: manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root,…
CVE-2020-1752 - CVSS 7 (high), 2020-04-30: A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing…
CVE-2020-1751 - CVSS 7 (high), 2020-04-17: An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not…
CVE-2020-6096 - CVSS 8.1 (high), 2020-04-01: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that…
CVE-2020-10029 - CVSS 5.5 (medium), 2020-03-04: The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function…
CVE-2019-19126 - CVSS 3.3 (low), 2019-11-19: On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program…
CVE-2019-1010024 - CVSS 5.3 (medium), 2019-07-15: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc.…
CVE-2019-1010023 - CVSS 8.8 (high), 2019-07-15: GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The…
CVE-2019-1010022 - CVSS 9.8 (critical), 2019-07-15: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is:…
CVE-2019-1010025 - CVSS 5.3 (medium), 2019-07-15: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc.…
CVE-2005-3590 - CVSS 9.8 (critical), 2019-04-10: The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the…
CVE-2006-7254 - CVSS 5.5 (medium), 2019-04-10: The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local…
CVE-2019-9192 - CVSS 7.5 (high), 2019-02-26: In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by…
CVE-2018-20796 - CVSS 7.5 (high), 2019-02-26: In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by…
CVE-2009-5155 - CVSS 7.5 (high), 2019-02-26: In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of…
CVE-2019-9169 - CVSS 9.8 (critical), 2019-02-26: In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted…
CVE-2019-7309 - CVSS 5.5 (medium), 2019-02-03: In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs…
CVE-2016-10739 - CVSS 5.3 (medium), 2019-01-21: In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by…
CVE-2019-6488 - CVSS 7.8 (high), 2019-01-18: The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit…
CVE-2018-19591 - CVSS 7.5 (high), 2018-12-04: In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket…
CVE-2018-11237 - CVSS 7.8 (high), 2018-05-18: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target…
CVE-2018-11236 - CVSS 9.8 (critical), 2018-05-18: stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could…
CVE-2017-18269 - CVSS 9.8 (critical), 2018-05-18: An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21…
CVE-2018-6551 - CVSS 9.8 (critical), 2018-02-02: The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly…
CVE-2018-6485 - CVSS 9.8 (critical), 2018-02-01: An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause…
CVE-2017-1000409 - CVSS 7 (high), 2018-02-01: A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many…
CVE-2017-1000408 - CVSS 7.8 (high), 2018-02-01: A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many…
CVE-2018-1000001 - CVSS 7.8 (high), 2018-01-31: In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a…
CVE-2017-16997 - CVSS 7.8 (high), 2017-12-18: elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or…
CVE-2017-17426 - CVSS 8.1 (high), 2017-12-05: The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object…
CVE-2017-15804 - CVSS 9.8 (critical), 2017-10-22: The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~…
CVE-2017-15671 - CVSS 5.9 (medium), 2017-10-20: The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when…
CVE-2017-15670 - CVSS 9.8 (critical), 2017-10-20: The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c,…
CVE-2011-5320 - CVSS 6.2 (medium), 2017-10-18: scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.
CVE-2017-12133 - CVSS 5.9 (medium), 2017-09-07: Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers…
CVE-2017-12132 - CVSS 5.9 (medium), 2017-08-01: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name…
CVE-2015-5180 - CVSS 7.5 (high), 2017-06-27: res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash).
CVE-2017-1000366 - CVSS 7.8 (high), 2017-06-19: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting…
CVE-2014-9984 - CVSS 9.8 (critical), 2017-06-12: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup…
CVE-2017-8804 - CVSS 7.5 (high), 2017-05-07: The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote…
CVE-2015-8985 - CVSS 5.9 (medium), 2017-03-20: The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and…
CVE-2015-8984 - CVSS 5.9 (medium), 2017-03-20: The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application…
CVE-2015-8983 - CVSS 8.1 (high), 2017-03-20: Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers…
CVE-2015-8982 - CVSS 8.1 (high), 2017-03-15: Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service…
CVE-2016-10228 - CVSS 5.9 (medium), 2017-03-02: The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or…
CVE-2016-5417 - CVSS 7.5 (high), 2017-02-17: Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote…
CVE-2016-6323 - CVSS 7.5 (high), 2016-10-07: The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit)…
CVE-2016-4429 - CVSS 5.9 (medium), 2016-06-10: Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a…
CVE-2016-3706 - CVSS 7.5 (high), 2016-06-10: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remote attackers to…
CVE-2016-3075 - CVSS 7.5 (high), 2016-06-01: Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) before 2.24 allows context-dependent…
CVE-2016-1234 - CVSS 7.5 (high), 2016-06-01: Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent…
CVE-2015-8779 - CVSS 9.8 (critical), 2016-04-19: Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial…
CVE-2015-8778 - CVSS 9.8 (critical), 2016-04-19: Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or…
CVE-2015-8776 - CVSS 9.1 (critical), 2016-04-19: The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application…
CVE-2014-9761 - CVSS 9.8 (critical), 2016-04-19: Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service…