GL
Product
Glibc
On CISA KEVExploited in the wild
163
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 47Medium 31Low 2
Watch
Add Glibc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4880 | – | Jun 1 | Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of… Affected: through 2.10.1; 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +31 more |
| CVE-2010-0015 | – | Jan 14 | nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd… Affected: 2.7; 2.10.2 |
| CVE-2004-0968 | – | Feb 9 | The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +20 more |
| CVE-2004-1453 | – | Dec 31 | GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +19 more |
| CVE-2004-1382 | – | Dec 31 | The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +20 more |
| CVE-2003-0859 | – | Dec 15 | The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink… Affected: 2.3.2 |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 2.1; 2.1.1; 2.1.2; 2.1.3; 2.2; 2.2.1; +7 more |
| CVE-2002-1265 | – | Nov 12 | The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +14 more |
| CVE-2002-1146 | – | Oct 11 | The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size… Affected: through 2.2.5 |
| CVE-2002-0684 | – | Aug 12 | Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious… Affected: through 2.2.5 |
| CVE-2000-0959 | – | Dec 19 | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite… Affected: 2.1.3.10 |
| CVE-2000-0824 | – | Nov 14 | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute… Affected: 2.1.1 |
| CVE-2000-0335 | – | May 3 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results Affected: 2.0; 2.1; 2.1.1; 2.1.2; 2.1.3 |