{"id":"CVE-2017-18269","aliases":["BELL-CVE-2017-18269","DEBIAN-CVE-2017-18269","EUVD-2017-9396","GHSA-r6cp-c5hh-vmv8","MGASA-2018-0293","SUSE-SU-2018:1562-1","SUSE-SU-2018:1562-2","SUSE-SU-2018:1991-1","UBUNTU-CVE-2017-18269","USN-4416-1","openSUSE-SU-2024:10792-1"],"status":"published","title":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2...","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04543,"percentile":0.91631,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-05-18T16:00:00Z","modified":"2026-09-01T20:03:47Z","fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.27-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.27-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.27-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"glibc","fixed_in":["2.23-0ubuntu11.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-29.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-62.13.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-13.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.2"}]}],"versions":["2.21-0ubuntu4","2.21-0ubuntu5","2.21-0ubuntu6","2.23-0ubuntu1","2.23-0ubuntu2","2.23-0ubuntu3","2.23-0ubuntu4","2.23-0ubuntu5","2.23-0ubuntu6","2.23-0ubuntu7","2.23-0ubuntu9","2.23-0ubuntu10","2.23-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.23-0ubuntu11.2"}]}],"versions":["2.21-0ubuntu4","2.21-0ubuntu5","2.21-0ubuntu6","2.23-0ubuntu1","2.23-0ubuntu2","2.23-0ubuntu3","2.23-0ubuntu4","2.23-0ubuntu5","2.23-0ubuntu6","2.23-0ubuntu7","2.23-0ubuntu9","2.23-0ubuntu10","2.23-0ubuntu11"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3ubuntu1.2"}]}],"versions":["2.26-0ubuntu2","2.26-0ubuntu2.1","2.27-0ubuntu2","2.27-0ubuntu3","2.27-3ubuntu1"],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-1.2"}]}],"bundled":34}],"products":[{"vendor":"gnu","product":"glibc"}],"references":[{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/fingolfin/memmove-bug","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22644","tags":["x_refsource_MISC","x_transferred","Issue Tracking","report"]},{"url":"https://security.netapp.com/advisory/ntap-20190329-0001/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190401-0001/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/4416-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18269"},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cd66c0e584c6d692bc8347b5e72723d02b8a8ada"},{"url":"https://github.com/advisories/GHSA-r6cp-c5hh-vmv8"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-18269","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-18269","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0293.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23136","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-security-announce/2018-06/msg00010.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181562-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1086690","tags":["report"]},{"url":"https://bugzilla.suse.com/1094150","tags":["report"]},{"url":"https://bugzilla.suse.com/1094154","tags":["report"]},{"url":"https://bugzilla.suse.com/1094161","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11237","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181562-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181991-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1092877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18269","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4416-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6485","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-11237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-1751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-1752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10029","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-25013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33574","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:00:00Z","modified":"2024-08-05T21:13:49.212Z","updated_at":"2026-11-02T14:33:21.747294Z"}],"euvd":[{"id":"EUVD-2017-9396","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:00:00Z","modified":"2024-08-05T21:13:49Z","updated_at":"2026-11-03T02:23:07.6199Z"}],"ghsa":[{"id":"GHSA-r6cp-c5hh-vmv8","title":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2...","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2022-05-13T01:25:25Z","modified":"2023-02-01T05:07:38Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:34.561364Z"}],"nvd":[{"id":"CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:29:00.227Z","modified":"2026-06-17T01:12:31.043Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:17.638656Z"}],"osv":[{"id":"BELL-CVE-2017-18269","title":"CVE-2017-18269 does not affect BellSoft software","status":"withdrawn","published":"2018-05-18T16:29:00Z","modified":"2026-01-26T09:47:02.665163Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:29:00.227Z","modified":"2026-04-16T06:21:19.080824325Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:29:00.227Z","modified":"2026-09-01T20:03:47.013027395Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","status":"published","published":"2018-05-18T16:29:00Z","modified":"2026-04-22T11:21:43.497714Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"MGASA-2018-0293","title":"Updated glibc packages fix security vulnerabilities","description":"Updated glibc packages fix security vulnerabilities:\n\nAn SSE2-optimized memmove implementation for i386 in\nsysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka\nglibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping\nmemory check if the source memory range spans the middle of the address space,\nresulting in corrupt data being produced by the copy operation. This may\ndisclose information to context-dependent attackers, or result in a denial of\nservice, or, possibly, code execution (CVE-2017-18269).\n\nstdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and\nearlier, when processing very long pathname arguments to the realpath function,\ncould encounter an integer overflow on 32-bit architectures, leading to a\nstack-based buffer overflow and, potentially, arbitrary code execution\n(CVE-2018-11236).\n","status":"published","published":"2018-06-24T22:02:29Z","modified":"2026-04-16T06:24:15.673511999Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10792-1","title":"glibc-2.34-1.2 on GA media","description":"These are all security issues fixed in the glibc-2.34-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:52:58.912445Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:1562-1","title":"Security update for glibc","description":"\n  \nThis update for glibc fixes the following issues:\n\n- CVE-2017-18269: Fix SSE2 memmove issue when crossing 2GB boundary (bsc#1094150)\n- CVE-2018-11236: Fix overflow in path length computation (bsc#1094161)\n- CVE-2018-11237: Don't write beyond buffer destination in __mempcpy_avx512_no_vzeroupper (bsc#1094154)\n\nNon security bugs fixed:\n\n- Fix crash in resolver on memory allocation failure (bsc#1086690)\n\n","status":"published","published":"2018-06-06T09:44:49Z","modified":"2026-02-04T02:32:37.350576Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1562-2","title":"Security update for glibc","description":"\n  \nThis update for glibc fixes the following issues:\n\n- CVE-2017-18269: Fix SSE2 memmove issue when crossing 2GB boundary (bsc#1094150)\n- CVE-2018-11236: Fix overflow in path length computation (bsc#1094161)\n- CVE-2018-11237: Don't write beyond buffer destination in __mempcpy_avx512_no_vzeroupper (bsc#1094154)\n\nNon security bugs fixed:\n\n- Fix crash in resolver on memory allocation failure (bsc#1086690)\n\n","status":"published","published":"2018-10-18T12:46:04Z","modified":"2026-02-04T02:38:55.586502Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1991-1","title":"Security update for glibc","description":"This update for glibc fixes the following security issues:\n\n- CVE-2017-18269: An SSE2-optimized memmove implementation for i386 did not\n  correctly perform the overlapping memory check if the source memory range\n  spaned the middle of the address space, resulting in corrupt data being\n  produced by the copy operation. This may have disclosed information to\n  context-dependent attackers, resulted in a denial of service or code execution\n  (bsc#1094150).\n- CVE-2018-11236: Prevent integer overflow on 32-bit architectures when\n  processing very long pathname arguments to the realpath function, leading to a\n  stack-based buffer overflow (bsc#1094161).\n- CVE-2018-11237: An AVX-512-optimized implementation of the mempcpy function\n  may have writen data beyond the target buffer, leading to a buffer overflow in\n  __mempcpy_avx512_no_vzeroupper (bsc#1092877, bsc#1094154).\n  ","status":"published","published":"2018-07-19T07:25:13Z","modified":"2026-02-04T04:13:35.81593Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-4416-1","title":"glibc vulnerabilities","description":"Florian Weimer discovered that the GNU C Library incorrectly handled\ncertain memory operations. A remote attacker could use this issue to cause\nthe GNU C Library to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS.\n(CVE-2017-12133)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nSSE2-optimized memmove operations. A remote attacker could use this issue\nto cause the GNU C Library to crash, resulting in a denial of service, or\npossibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.\n(CVE-2017-18269)\n\nIt was discovered that the GNU C Library incorrectly handled certain\npathname operations. A remote attacker could use this issue to cause the\nGNU C Library to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-11236)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nAVX-512-optimized mempcpy operations. A remote attacker could use this\nissue to cause the GNU C Library to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-11237)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nhostname loookups. A remote attacker could use this issue to cause the GNU\nC Library to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-19591)\n\nJakub Wilk discovered that the GNU C Library incorrectly handled certain\nmemalign functions. A remote attacker could use this issue to cause the GNU\nC Library to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-6485)\n\nIt was discovered that the GNU C Library incorrectly ignored the\nLD_PREFER_MAP_32BIT_EXEC environment variable after security transitions. A\nlocal attacker could use this issue to bypass ASLR restrictions.\n(CVE-2019-19126)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nregular expressions. A remote attacker could possibly use this issue to\ncause the GNU C Library to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-9169)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nbit patterns. A remote attacker could use this issue to cause the GNU C\nLibrary to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04\nLTS. (CVE-2020-10029)\n\nIt was discovered that the GNU C Library incorrectly handled certain\nsignal trampolines on PowerPC. A remote attacker could use this issue to\ncause the GNU C Library to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2020-1751)\n\nIt was discovered that the GNU C Library incorrectly handled tilde\nexpansion. A remote attacker could use this issue to cause the GNU C\nLibrary to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2020-1752)\n","status":"published","published":"2020-07-06T18:10:11Z","modified":"2026-04-27T19:02:50.923199887Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}