Debian Glibc vulnerabilities

CVE-2016-1234 [HIGH] CVE-2016-1234: glibc - Stack-based buffer overflow in the glob implementation in GNU C Library (aka gli... Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name. Scope: local bookworm: resolved (fixed in 2.22-8) bullseye: resolved (fixed in 2.22-8) forky: resolved (fixed in 2.22-8) sid: resolved (fixed in 2.22-8) tri

CVE-2017-16997 [HIGH] CVE-2017-16997: glibc - elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishan... elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpret

CVE-2018-11237 [HIGH] CVE-2018-11237: glibc - An AVX-512-optimized implementation of the mempcpy function in the GNU C Library... An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper. Scope: local bookworm: resolved (fixed in 2.27-4) bullseye: resolved (fixed in 2.27-4) forky: resolved (fixed in 2.27-4) sid: resolved (fixed in 2

CVE-2021-3998 [HIGH] CVE-2021-3998: glibc - A flaw was found in glibc. The realpath() function can mistakenly return an unex... A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data. Scope: local bookworm: resolved (fixed in 2.33-4) bullseye: resolved forky: resolved (fixed in 2.33-4) sid: resolved (fixed in 2.33-4) trixie: resolved (fixed in 2.33-4)

CVE-2025-15281 [HIGH] CVE-2025-15281: glibc - Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Lib... Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2.42-11) sid: resolved (fixed in 2.42-11) trixie

CVE-2015-5180 [HIGH] CVE-2015-5180: glibc - res_query in libresolv in glibc before 2.25 allows remote attackers to cause a d... res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash). Scope: local bookworm: resolved (fixed in 2.24-9) bullseye: resolved (fixed in 2.24-9) forky: resolved (fixed in 2.24-9) sid: resolved (fixed in 2.24-9) trixie: resolved (fixed in 2.24-9)

CVE-2015-1781 [MEDIUM] CVE-2015-1781: glibc - Buffer overflow in the gethostbyname_r and other unspecified NSS functions in th... Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer. Scope: local bookworm: resolved (fixed in 2.19-20) bullseye: resolv

CVE-2021-3326 [HIGH] CVE-2021-3326: glibc - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, w... The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service. Scope: local bookworm: resolved (fixed in 2.31-10) bullseye: resolved (fixed in 2.31-10) forky: resolved (fixed in 2

CVE-2025-4802 [HIGH] CVE-2025-4802: glibc - Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Librar... Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). Scope: local bookworm: resolved (fixed in 2.36-9+de

CVE-2015-1472 [HIGH] CVE-2015-1472: glibc - The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc... The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wsc

CVE-2014-4043 [HIGH] CVE-2014-4043: glibc - The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy... The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities. Scope: local bookworm: resolved (fixed in 2.19-2) bullseye: resolved (fixed in 2.19-2) forky: resolved (fixed in 2.19-2) sid: resolved (fixed in

CVE-2016-6323 [HIGH] CVE-2016-6323: glibc - The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 c... The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation. Scope: local bookworm: resolved (

CVE-2010-0015 [HIGH] CVE-2010-0015: glibc - nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded... nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function. Scope: local bookworm: resolved (fixed in 2.10.2-4) bullseye: resolved (f

CVE-2016-5417 [HIGH] CVE-2016-5417: glibc - Memory leak in the __res_vinit function in the IPv6 name server management code ... Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures. Scope: local bookworm: resolved (fixed in 2.22-4) bullseye: resolved (fixed in 2

CVE-2012-3406 [MEDIUM] CVE-2012-3406: glibc - The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.... The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execu

CVE-2002-0651 [HIGH] CVE-2002-0651: glibc - Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as de... Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers. Scope: local bookworm: resolved (fixed in 2.2.5-8) bullseye: resolved (fixed in 2.2.5-8) forky: resolved (fixed in 2.2.5-8) sid: resolved (fixed i

CVE-2023-4527 [MEDIUM] CVE-2023-4527: glibc - A flaw was found in glibc. When the getaddrinfo function is called with the AF_U... A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. Scope: local bookworm: resolved (fixed in 2.36-

CVE-2019-6488 [HIGH] CVE-2019-6488: glibc - The string component in the GNU C Library (aka glibc or libc6) through 2.28, whe... The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unali

CVE-2009-5155 [HIGH] CVE-2009-5155: glibc - In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/re... In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match. Scope: local bookworm: resolved (fixed in 2.28-1) bullseye: resolved (fixed in 2.28-1) forky:

CVE-2023-5156 [MEDIUM] CVE-2023-5156: glibc - A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced... A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 2.37-11) sid: resolved (fixed in 2.37-11) trixie: resolved (fixed in 2.37-11)