Gnu Libc vulnerabilities

• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Buffer overread in ns_printrrf with corrupted RDATA field CVE-2026-6238 Fix available 6.5 MediumApril 28, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Potential buffer overflow in ns_sprintrrf TSIG handling path CVE-2026-5435 Fix available 7.3 HighApril 28, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more scanf %mc off-by-one heap buffer overflow CVE-2026-5450 Fix available 9.8 CriticalApril 20, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Potential buffer under-read in ungetwc CVE-2026-5928 Fix available 7.5 HighApril 20, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more iconv crash due to assertion failure with untrusted input CVE-2026-4046 Fix available 7.5 HighMarch 30, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames CVE-2026-4438 Fix available 5.4 MediumMarch 20, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response CVE-2026-4437 Fix available 7.5 HighMarch 20, 2026
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Calling NSS-backed functions that support caching via nscd may call the nscd client side code... CVE-2026-3904 Fix available 6.2 MediumMarch 11, 2026
• gnu glibc wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory CVE-2025-15281 Fix available 7.5 HighJanuary 20, 2026
• gnu glibc getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler CVE-2026-0915 Public exploitFix available 7.5 HighJanuary 15, 2026
• gnu glibc Integer overflow in memalign leads to heap corruption CVE-2026-0861 Fix available 8.4 HighJanuary 14, 2026
• gnu glibc The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40... CVE-2025-5745 Fix available 5.6 MediumJune 5, 2025
• gnu glibc The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39... CVE-2025-5702 Fix available 5.6 MediumJune 5, 2025
• gnu glibc Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to... CVE-2025-4802 Public exploitFix available 7.8 HighMay 16, 2025
• gnu libcdio Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via... CVE-2024-36600 Fix available 8.4 HighJune 14, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +11 more +13 more nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2024-33601 Fix available 7.3 HighApril 26, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +8 more +10 more nscd: Stack-based buffer overflow in netgroup cache CVE-2024-33599 Fix available 8.1 HighApril 26, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: integer overflow in __vsyslog_internal() CVE-2023-6780 Fix available 5.3 MediumJanuary 30, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() CVE-2023-6779 Fix available 8.2 HighJanuary 30, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: heap-based buffer overflow in __vsyslog_internal() CVE-2023-6246 Public exploitFix available 8.4 HighJanuary 30, 2024
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 more Glibc: dos due to memory leak in getaddrinfo.c CVE-2023-5156 Fix available 7.5 HighSeptember 25, 2023
• gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 more Glibc: potential use-after-free in getaddrinfo() CVE-2023-4806 Fix available 5.9 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• gnu glibc end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22... CVE-2015-20109 Fix available 5.5 MediumJune 25, 2023
• gnu c library, glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This... CVE-2023-0687 Fix availableDisputed 4.6 MediumFebruary 6, 2023
• gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some... CVE-2023-25139 Fix available 9.8 CriticalFebruary 3, 2023
• gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 more An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a... CVE-2022-39046 Fix available 7.5 HighAugust 31, 2022
• gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 more A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to... CVE-2021-3999 Fix available 7.8 HighFebruary 1, 2022
• gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 more A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,... CVE-2021-3998 Fix available 7.5 HighFebruary 1, 2022
• gnu glibc, debian linux, oracle communications cloud native core binding support function +8 more +10 more The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka... CVE-2022-23219 Fix available 9.8 CriticalJanuary 14, 2022
• gnu glibc, debian linux, oracle communications cloud native core unified data repository +4 more +6 more The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ... CVE-2022-23218 Fix available 9.8 CriticalJanuary 14, 2022
• gnu glibc, oracle communications cloud native core binding support function, communications cloud native core network function cloud native environment +7 more +9 more In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force... CVE-2021-43396 Fix availableDisputed 7.5 HighNovember 4, 2021
• gnu glibc, fedoraproject fedora, oracle communications cloud native core binding support function +8 more +10 more In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c... CVE-2021-38604 Fix available 7.5 HighAugust 12, 2021
• gnu glibc, debian linux, netapp active iq unified manager +7 more +9 more The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary... CVE-2021-35942 Fix available 9.1 CriticalJuly 20, 2021
• gnu glibc, debian linux, fedoraproject fedora +13 more +15 more The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may... CVE-2021-33574 Fix available 9.8 CriticalMay 25, 2021
• gnu glibc, debian linux, netapp 500f firmware +14 more +16 more The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing... CVE-2020-27618 Fix available 5.5 MediumFebruary 26, 2021
• gnu glibc, debian linux, fedoraproject fedora +3 more +5 more The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,... CVE-2021-27645 Fix available 2.5 LowFebruary 24, 2021
• gnu glibc, debian linux, fujitsu m10-1 firmware +11 more +13 more The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing... CVE-2021-3326 Fix available 7.5 HighJanuary 27, 2021
• gnu glibc, broadcom fabric operating system, debian linux +8 more +10 more The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid... CVE-2019-25013 Fix available 5.9 MediumJanuary 4, 2021
• gnu glibc, netapp cloud backup, solidfire baseboard management controller +4 more +6 more sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has... CVE-2020-29573 Fix available 7.5 HighDecember 5, 2020
• gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 more The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4... CVE-2020-29562 Fix available 4.8 MediumDecember 4, 2020
• gnu glibc manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the... CVE-1999-0199 Fix available 9.8 CriticalOctober 6, 2020
• gnu glibc, debian linux, fedoraproject fedora +3 more +5 more An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU... CVE-2020-6096 Fix available 8.1 HighApril 1, 2020
• gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 more An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal... CVE-2020-1751 Fix available 5.1 MediumMarch 31, 2020
• gnu glibc, canonical ubuntu linux, debian linux +8 more +10 more A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the... CVE-2020-1752 Fix available 7.0 HighMarch 8, 2020
• Show olderLoading…