GL
Product
Glibc
On CISA KEVExploited in the wild
163
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 47Medium 31Low 2
Watch
Add Glibc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 2.34 before 2.39 |
| CVE-2026-5450 | 9.8 | Apr 20 | scanf %mc off-by-one heap buffer overflow Affected: 2.7 through 2.43 |
| CVE-2023-0687 | 9.8 | Feb 6 | A vulnerability was found in GNU C Library 2.38 Affected: before 2.38 |
| CVE-2023-25139 | 9.8 | Feb 3 | sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size Affected: 2.37 |
| CVE-2022-23218 | 9.8 | Jan 14 | The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating… Affected: before 2.31 |
| CVE-2022-23219 | 9.8 | Jan 14 | The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating… Affected: before 2.31 |
| CVE-2021-33574 | 9.8 | May 25 | The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free Affected: 2.32; 2.33 |
| CVE-1999-0199 | 9.8 | Oct 6 | manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow… Affected: before 2.2 |
| CVE-2019-1010022 | 9.8 | Jul 15 | GNU Libc current is affected by: Mitigation bypass Affected: All versions, or not specified |
| CVE-2005-3590 | 9.8 | Apr 10 | The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is… Affected: before 2.3.5 |
| CVE-2019-9169 | 9.8 | Feb 26 | In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression… Affected: through 2.29 |
| CVE-2018-11236 | 9.8 | May 18 | stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer… Affected: through 2.27 |
| CVE-2017-18269 | 9.8 | May 18 | An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not… Affected: 2.21 through 2.27 |
| CVE-2018-6551 | 9.8 | Feb 2 | The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls… Affected: 2.24 through 2.26 |
| CVE-2018-6485 | 9.8 | Feb 1 | An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to… Affected: through 2.26 |
| CVE-2017-15804 | 9.8 | Oct 22 | The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator Affected: through 2.26 |
| CVE-2017-15670 | 9.8 | Oct 20 | The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing… Affected: through 2.26 |
| CVE-2014-9984 | 9.8 | Jun 12 | nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to… Affected: through 2.19 |
| CVE-2015-8779 | 9.8 | Apr 19 | Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service… Affected: through 2.22 |
| CVE-2015-8778 | 9.8 | Apr 19 | Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute… Affected: through 2.22 |
| CVE-2014-9761 | 9.8 | Apr 19 | Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or… Affected: through 2.22 |
| CVE-2021-35942 | 9.1 | Jul 22 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted… Affected: before 2.31 |
| CVE-2015-8776 | 9.1 | Apr 19 | The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain… Affected: through 2.22 |
| CVE-2026-0861 | 8.4 | Jan 14 | Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer… Affected: 2.30 through 2.42 |
| CVE-2024-33599 | 8.1 | May 6 | nscd: Stack-based buffer overflow in netgroup cache Affected: 2.15 before 2.40 |
| CVE-2020-6096 | 8.1 | Apr 1 | An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000 Affected: through 2.31 |
| CVE-2017-17426 | 8.1 | Dec 5 | The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to… Affected: 2.26 |
| CVE-2015-8983 | 8.1 | Mar 20 | Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of… Affected: through 2.21 |
| CVE-2015-8982 | 8.1 | Mar 15 | Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly… Affected: through 2.20 |
| CVE-2015-7547 | 8.1 | Feb 18 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote… Affected: 2.9; 2.10; 2.10.1; 2.11; 2.11.1; 2.11.2; +15 more |
| CVE-2025-4802 | 7.8 | May 16 | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in… Affected: 2.27 through 2.38 |
| CVE-2023-6246 | 7.8 | Jan 31 | Glibc: heap-based buffer overflow in __vsyslog_internal() Affected: 2.36 before 2.39 |
| CVE-2021-3999 | 7.8 | Aug 24 | A flaw was found in glibc Affected: before 2.31 |
| CVE-2019-6488 | 7.8 | Jan 18 | The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in… Affected: through 2.28 |
| CVE-2018-11237 | 7.8 | May 18 | An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer… Affected: through 2.27 |
| CVE-2017-1000408 | 7.8 | Feb 1 | A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable Affected: 2.1.1 |
| CVE-2018-1000001 | 7.8 | Jan 31 | In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and… Affected: through 2.26 |
| CVE-2017-16997 | 7.8 | Dec 18 | elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which… Affected: 2.19; 2.20; 2.21; 2.22; 2.23; 2.25; +1 more |
| CVE-2017-1000366 | 7.8 | Jun 19 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code… Affected: through 2.25 |
| CVE-2026-5928 | 7.5 | Apr 20 | Potential buffer under-read in ungetwc Affected: through 2.43 |
| CVE-2026-4046 | 7.5 | Mar 30 | iconv crash due to assertion failure with untrusted input Affected: through 2.43 |
| CVE-2026-4437 | 7.5 | Mar 20 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response Affected: 2.34 through 2.43 |
| CVE-2025-15281 | 7.5 | Jan 20 | Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the… Affected: 2.0 before 2.43 |
| CVE-2026-0915 | 7.5 | Jan 15 | Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C… Affected: 2.0 through 2.42 |
| CVE-2023-6779 | 7.5 | Jan 31 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() Affected: 2.37 before 2.39 |
| CVE-2023-5156 | 7.5 | Sep 25 | Glibc: dos due to memory leak in getaddrinfo.c Affected: 2.34 before 2.39 |
| CVE-2021-3998 | 7.5 | Aug 24 | A flaw was found in glibc Affected: 2.33 before 2.35 |
| CVE-2021-43396 | 7.5 | Nov 4 | In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is… Affected: 2.34 |
| CVE-2021-38604 | 7.5 | Aug 12 | In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference Affected: through 2.34 |
| CVE-2021-3326 | 7.5 | Jan 27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the… Affected: through 2.32.0 |