Lucene search

K
amazonAmazonALAS-2023-2371
HistoryNov 29, 2023 - 10:20 p.m.

Medium: glibc

2023-11-2922:20:00
alas.aws.amazon.com
9
glibc
use-after-free
null pointer
denial of service
amazon linux 2

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

Issue Overview:

2023-12-14: CVE-2021-33574 was added to this advisory.

The mq_notify function in the GNU C Library (aka glibc) has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact. (CVE-2021-33574)

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix. (CVE-2021-38604)

Affected Packages:

glibc

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update glibc to update your system.

New Packages:

aarch64:  
    glibc-2.26-57.amzn2.aarch64  
    libcrypt-2.26-57.amzn2.aarch64  
    libcrypt-nss-2.26-57.amzn2.aarch64  
    glibc-devel-2.26-57.amzn2.aarch64  
    glibc-static-2.26-57.amzn2.aarch64  
    glibc-headers-2.26-57.amzn2.aarch64  
    glibc-common-2.26-57.amzn2.aarch64  
    glibc-locale-source-2.26-57.amzn2.aarch64  
    glibc-langpack-eo-2.26-57.amzn2.aarch64  
    glibc-langpack-aa-2.26-57.amzn2.aarch64  
    glibc-langpack-af-2.26-57.amzn2.aarch64  
    glibc-langpack-ak-2.26-57.amzn2.aarch64  
    glibc-langpack-am-2.26-57.amzn2.aarch64  
    glibc-langpack-an-2.26-57.amzn2.aarch64  
    glibc-langpack-anp-2.26-57.amzn2.aarch64  
    glibc-langpack-ar-2.26-57.amzn2.aarch64  
    glibc-langpack-as-2.26-57.amzn2.aarch64  
    glibc-langpack-ast-2.26-57.amzn2.aarch64  
    glibc-langpack-ayc-2.26-57.amzn2.aarch64  
    glibc-langpack-az-2.26-57.amzn2.aarch64  
    glibc-langpack-be-2.26-57.amzn2.aarch64  
    glibc-langpack-bem-2.26-57.amzn2.aarch64  
    glibc-langpack-ber-2.26-57.amzn2.aarch64  
    glibc-langpack-bg-2.26-57.amzn2.aarch64  
    glibc-langpack-bhb-2.26-57.amzn2.aarch64  
    glibc-langpack-bho-2.26-57.amzn2.aarch64  
    glibc-langpack-bn-2.26-57.amzn2.aarch64  
    glibc-langpack-bo-2.26-57.amzn2.aarch64  
    glibc-langpack-br-2.26-57.amzn2.aarch64  
    glibc-langpack-brx-2.26-57.amzn2.aarch64  
    glibc-langpack-bs-2.26-57.amzn2.aarch64  
    glibc-langpack-byn-2.26-57.amzn2.aarch64  
    glibc-langpack-ca-2.26-57.amzn2.aarch64  
    glibc-langpack-ce-2.26-57.amzn2.aarch64  
    glibc-langpack-chr-2.26-57.amzn2.aarch64  
    glibc-langpack-cmn-2.26-57.amzn2.aarch64  
    glibc-langpack-crh-2.26-57.amzn2.aarch64  
    glibc-langpack-cs-2.26-57.amzn2.aarch64  
    glibc-langpack-csb-2.26-57.amzn2.aarch64  
    glibc-langpack-cv-2.26-57.amzn2.aarch64  
    glibc-langpack-cy-2.26-57.amzn2.aarch64  
    glibc-langpack-da-2.26-57.amzn2.aarch64  
    glibc-langpack-de-2.26-57.amzn2.aarch64  
    glibc-langpack-doi-2.26-57.amzn2.aarch64  
    glibc-langpack-dv-2.26-57.amzn2.aarch64  
    glibc-langpack-dz-2.26-57.amzn2.aarch64  
    glibc-langpack-el-2.26-57.amzn2.aarch64  
    glibc-langpack-en-2.26-57.amzn2.aarch64  
    glibc-langpack-es-2.26-57.amzn2.aarch64  
    glibc-langpack-et-2.26-57.amzn2.aarch64  
    glibc-langpack-eu-2.26-57.amzn2.aarch64  
    glibc-langpack-fa-2.26-57.amzn2.aarch64  
    glibc-langpack-ff-2.26-57.amzn2.aarch64  
    glibc-langpack-fi-2.26-57.amzn2.aarch64  
    glibc-langpack-fil-2.26-57.amzn2.aarch64  
    glibc-langpack-fo-2.26-57.amzn2.aarch64  
    glibc-langpack-fr-2.26-57.amzn2.aarch64  
    glibc-langpack-fur-2.26-57.amzn2.aarch64  
    glibc-langpack-fy-2.26-57.amzn2.aarch64  
    glibc-langpack-ga-2.26-57.amzn2.aarch64  
    glibc-langpack-gd-2.26-57.amzn2.aarch64  
    glibc-langpack-gez-2.26-57.amzn2.aarch64  
    glibc-langpack-gl-2.26-57.amzn2.aarch64  
    glibc-langpack-gu-2.26-57.amzn2.aarch64  
    glibc-langpack-gv-2.26-57.amzn2.aarch64  
    glibc-langpack-ha-2.26-57.amzn2.aarch64  
    glibc-langpack-hak-2.26-57.amzn2.aarch64  
    glibc-langpack-he-2.26-57.amzn2.aarch64  
    glibc-langpack-hi-2.26-57.amzn2.aarch64  
    glibc-langpack-hne-2.26-57.amzn2.aarch64  
    glibc-langpack-hr-2.26-57.amzn2.aarch64  
    glibc-langpack-hsb-2.26-57.amzn2.aarch64  
    glibc-langpack-ht-2.26-57.amzn2.aarch64  
    glibc-langpack-hu-2.26-57.amzn2.aarch64  
    glibc-langpack-hy-2.26-57.amzn2.aarch64  
    glibc-langpack-ia-2.26-57.amzn2.aarch64  
    glibc-langpack-id-2.26-57.amzn2.aarch64  
    glibc-langpack-ig-2.26-57.amzn2.aarch64  
    glibc-langpack-ik-2.26-57.amzn2.aarch64  
    glibc-langpack-is-2.26-57.amzn2.aarch64  
    glibc-langpack-it-2.26-57.amzn2.aarch64  
    glibc-langpack-iu-2.26-57.amzn2.aarch64  
    glibc-langpack-ja-2.26-57.amzn2.aarch64  
    glibc-langpack-ka-2.26-57.amzn2.aarch64  
    glibc-langpack-kk-2.26-57.amzn2.aarch64  
    glibc-langpack-kl-2.26-57.amzn2.aarch64  
    glibc-langpack-km-2.26-57.amzn2.aarch64  
    glibc-langpack-kn-2.26-57.amzn2.aarch64  
    glibc-langpack-ko-2.26-57.amzn2.aarch64  
    glibc-langpack-kok-2.26-57.amzn2.aarch64  
    glibc-langpack-ks-2.26-57.amzn2.aarch64  
    glibc-langpack-ku-2.26-57.amzn2.aarch64  
    glibc-langpack-kw-2.26-57.amzn2.aarch64  
    glibc-langpack-ky-2.26-57.amzn2.aarch64  
    glibc-langpack-lb-2.26-57.amzn2.aarch64  
    glibc-langpack-lg-2.26-57.amzn2.aarch64  
    glibc-langpack-li-2.26-57.amzn2.aarch64  
    glibc-langpack-lij-2.26-57.amzn2.aarch64  
    glibc-langpack-ln-2.26-57.amzn2.aarch64  
    glibc-langpack-lo-2.26-57.amzn2.aarch64  
    glibc-langpack-lt-2.26-57.amzn2.aarch64  
    glibc-langpack-lv-2.26-57.amzn2.aarch64  
    glibc-langpack-lzh-2.26-57.amzn2.aarch64  
    glibc-langpack-mag-2.26-57.amzn2.aarch64  
    glibc-langpack-mai-2.26-57.amzn2.aarch64  
    glibc-langpack-mg-2.26-57.amzn2.aarch64  
    glibc-langpack-mhr-2.26-57.amzn2.aarch64  
    glibc-langpack-mi-2.26-57.amzn2.aarch64  
    glibc-langpack-mk-2.26-57.amzn2.aarch64  
    glibc-langpack-ml-2.26-57.amzn2.aarch64  
    glibc-langpack-mn-2.26-57.amzn2.aarch64  
    glibc-langpack-mni-2.26-57.amzn2.aarch64  
    glibc-langpack-mr-2.26-57.amzn2.aarch64  
    glibc-langpack-ms-2.26-57.amzn2.aarch64  
    glibc-langpack-mt-2.26-57.amzn2.aarch64  
    glibc-langpack-my-2.26-57.amzn2.aarch64  
    glibc-langpack-nan-2.26-57.amzn2.aarch64  
    glibc-langpack-nb-2.26-57.amzn2.aarch64  
    glibc-langpack-nds-2.26-57.amzn2.aarch64  
    glibc-langpack-ne-2.26-57.amzn2.aarch64  
    glibc-langpack-nhn-2.26-57.amzn2.aarch64  
    glibc-langpack-niu-2.26-57.amzn2.aarch64  
    glibc-langpack-nl-2.26-57.amzn2.aarch64  
    glibc-langpack-nn-2.26-57.amzn2.aarch64  
    glibc-langpack-nr-2.26-57.amzn2.aarch64  
    glibc-langpack-nso-2.26-57.amzn2.aarch64  
    glibc-langpack-oc-2.26-57.amzn2.aarch64  
    glibc-langpack-om-2.26-57.amzn2.aarch64  
    glibc-langpack-or-2.26-57.amzn2.aarch64  
    glibc-langpack-os-2.26-57.amzn2.aarch64  
    glibc-langpack-pa-2.26-57.amzn2.aarch64  
    glibc-langpack-pap-2.26-57.amzn2.aarch64  
    glibc-langpack-pl-2.26-57.amzn2.aarch64  
    glibc-langpack-ps-2.26-57.amzn2.aarch64  
    glibc-langpack-pt-2.26-57.amzn2.aarch64  
    glibc-langpack-quz-2.26-57.amzn2.aarch64  
    glibc-langpack-raj-2.26-57.amzn2.aarch64  
    glibc-langpack-ro-2.26-57.amzn2.aarch64  
    glibc-langpack-ru-2.26-57.amzn2.aarch64  
    glibc-langpack-rw-2.26-57.amzn2.aarch64  
    glibc-langpack-sa-2.26-57.amzn2.aarch64  
    glibc-langpack-sat-2.26-57.amzn2.aarch64  
    glibc-langpack-sc-2.26-57.amzn2.aarch64  
    glibc-langpack-sd-2.26-57.amzn2.aarch64  
    glibc-langpack-se-2.26-57.amzn2.aarch64  
    glibc-langpack-sgs-2.26-57.amzn2.aarch64  
    glibc-langpack-shs-2.26-57.amzn2.aarch64  
    glibc-langpack-si-2.26-57.amzn2.aarch64  
    glibc-langpack-sid-2.26-57.amzn2.aarch64  
    glibc-langpack-sk-2.26-57.amzn2.aarch64  
    glibc-langpack-sl-2.26-57.amzn2.aarch64  
    glibc-langpack-so-2.26-57.amzn2.aarch64  
    glibc-langpack-sq-2.26-57.amzn2.aarch64  
    glibc-langpack-sr-2.26-57.amzn2.aarch64  
    glibc-langpack-ss-2.26-57.amzn2.aarch64  
    glibc-langpack-st-2.26-57.amzn2.aarch64  
    glibc-langpack-sv-2.26-57.amzn2.aarch64  
    glibc-langpack-sw-2.26-57.amzn2.aarch64  
    glibc-langpack-szl-2.26-57.amzn2.aarch64  
    glibc-langpack-ta-2.26-57.amzn2.aarch64  
    glibc-langpack-tcy-2.26-57.amzn2.aarch64  
    glibc-langpack-te-2.26-57.amzn2.aarch64  
    glibc-langpack-tg-2.26-57.amzn2.aarch64  
    glibc-langpack-th-2.26-57.amzn2.aarch64  
    glibc-langpack-the-2.26-57.amzn2.aarch64  
    glibc-langpack-ti-2.26-57.amzn2.aarch64  
    glibc-langpack-tig-2.26-57.amzn2.aarch64  
    glibc-langpack-tk-2.26-57.amzn2.aarch64  
    glibc-langpack-tl-2.26-57.amzn2.aarch64  
    glibc-langpack-tn-2.26-57.amzn2.aarch64  
    glibc-langpack-tr-2.26-57.amzn2.aarch64  
    glibc-langpack-ts-2.26-57.amzn2.aarch64  
    glibc-langpack-tt-2.26-57.amzn2.aarch64  
    glibc-langpack-ug-2.26-57.amzn2.aarch64  
    glibc-langpack-uk-2.26-57.amzn2.aarch64  
    glibc-langpack-unm-2.26-57.amzn2.aarch64  
    glibc-langpack-ur-2.26-57.amzn2.aarch64  
    glibc-langpack-uz-2.26-57.amzn2.aarch64  
    glibc-langpack-ve-2.26-57.amzn2.aarch64  
    glibc-langpack-vi-2.26-57.amzn2.aarch64  
    glibc-langpack-wa-2.26-57.amzn2.aarch64  
    glibc-langpack-wae-2.26-57.amzn2.aarch64  
    glibc-langpack-wal-2.26-57.amzn2.aarch64  
    glibc-langpack-wo-2.26-57.amzn2.aarch64  
    glibc-langpack-xh-2.26-57.amzn2.aarch64  
    glibc-langpack-yi-2.26-57.amzn2.aarch64  
    glibc-langpack-yo-2.26-57.amzn2.aarch64  
    glibc-langpack-yue-2.26-57.amzn2.aarch64  
    glibc-langpack-zh-2.26-57.amzn2.aarch64  
    glibc-langpack-zu-2.26-57.amzn2.aarch64  
    glibc-all-langpacks-2.26-57.amzn2.aarch64  
    glibc-minimal-langpack-2.26-57.amzn2.aarch64  
    nscd-2.26-57.amzn2.aarch64  
    nss_db-2.26-57.amzn2.aarch64  
    nss_nis-2.26-57.amzn2.aarch64  
    nss_hesiod-2.26-57.amzn2.aarch64  
    glibc-nss-devel-2.26-57.amzn2.aarch64  
    glibc-utils-2.26-57.amzn2.aarch64  
    glibc-debuginfo-2.26-57.amzn2.aarch64  
    glibc-benchtests-2.26-57.amzn2.aarch64  
  
i686:  
    glibc-2.26-57.amzn2.i686  
    libcrypt-2.26-57.amzn2.i686  
    libcrypt-nss-2.26-57.amzn2.i686  
    glibc-devel-2.26-57.amzn2.i686  
    glibc-static-2.26-57.amzn2.i686  
    glibc-headers-2.26-57.amzn2.i686  
    glibc-common-2.26-57.amzn2.i686  
    glibc-locale-source-2.26-57.amzn2.i686  
    glibc-langpack-eo-2.26-57.amzn2.i686  
    glibc-langpack-aa-2.26-57.amzn2.i686  
    glibc-langpack-af-2.26-57.amzn2.i686  
    glibc-langpack-ak-2.26-57.amzn2.i686  
    glibc-langpack-am-2.26-57.amzn2.i686  
    glibc-langpack-an-2.26-57.amzn2.i686  
    glibc-langpack-anp-2.26-57.amzn2.i686  
    glibc-langpack-ar-2.26-57.amzn2.i686  
    glibc-langpack-as-2.26-57.amzn2.i686  
    glibc-langpack-ast-2.26-57.amzn2.i686  
    glibc-langpack-ayc-2.26-57.amzn2.i686  
    glibc-langpack-az-2.26-57.amzn2.i686  
    glibc-langpack-be-2.26-57.amzn2.i686  
    glibc-langpack-bem-2.26-57.amzn2.i686  
    glibc-langpack-ber-2.26-57.amzn2.i686  
    glibc-langpack-bg-2.26-57.amzn2.i686  
    glibc-langpack-bhb-2.26-57.amzn2.i686  
    glibc-langpack-bho-2.26-57.amzn2.i686  
    glibc-langpack-bn-2.26-57.amzn2.i686  
    glibc-langpack-bo-2.26-57.amzn2.i686  
    glibc-langpack-br-2.26-57.amzn2.i686  
    glibc-langpack-brx-2.26-57.amzn2.i686  
    glibc-langpack-bs-2.26-57.amzn2.i686  
    glibc-langpack-byn-2.26-57.amzn2.i686  
    glibc-langpack-ca-2.26-57.amzn2.i686  
    glibc-langpack-ce-2.26-57.amzn2.i686  
    glibc-langpack-chr-2.26-57.amzn2.i686  
    glibc-langpack-cmn-2.26-57.amzn2.i686  
    glibc-langpack-crh-2.26-57.amzn2.i686  
    glibc-langpack-cs-2.26-57.amzn2.i686  
    glibc-langpack-csb-2.26-57.amzn2.i686  
    glibc-langpack-cv-2.26-57.amzn2.i686  
    glibc-langpack-cy-2.26-57.amzn2.i686  
    glibc-langpack-da-2.26-57.amzn2.i686  
    glibc-langpack-de-2.26-57.amzn2.i686  
    glibc-langpack-doi-2.26-57.amzn2.i686  
    glibc-langpack-dv-2.26-57.amzn2.i686  
    glibc-langpack-dz-2.26-57.amzn2.i686  
    glibc-langpack-el-2.26-57.amzn2.i686  
    glibc-langpack-en-2.26-57.amzn2.i686  
    glibc-langpack-es-2.26-57.amzn2.i686  
    glibc-langpack-et-2.26-57.amzn2.i686  
    glibc-langpack-eu-2.26-57.amzn2.i686  
    glibc-langpack-fa-2.26-57.amzn2.i686  
    glibc-langpack-ff-2.26-57.amzn2.i686  
    glibc-langpack-fi-2.26-57.amzn2.i686  
    glibc-langpack-fil-2.26-57.amzn2.i686  
    glibc-langpack-fo-2.26-57.amzn2.i686  
    glibc-langpack-fr-2.26-57.amzn2.i686  
    glibc-langpack-fur-2.26-57.amzn2.i686  
    glibc-langpack-fy-2.26-57.amzn2.i686  
    glibc-langpack-ga-2.26-57.amzn2.i686  
    glibc-langpack-gd-2.26-57.amzn2.i686  
    glibc-langpack-gez-2.26-57.amzn2.i686  
    glibc-langpack-gl-2.26-57.amzn2.i686  
    glibc-langpack-gu-2.26-57.amzn2.i686  
    glibc-langpack-gv-2.26-57.amzn2.i686  
    glibc-langpack-ha-2.26-57.amzn2.i686  
    glibc-langpack-hak-2.26-57.amzn2.i686  
    glibc-langpack-he-2.26-57.amzn2.i686  
    glibc-langpack-hi-2.26-57.amzn2.i686  
    glibc-langpack-hne-2.26-57.amzn2.i686  
    glibc-langpack-hr-2.26-57.amzn2.i686  
    glibc-langpack-hsb-2.26-57.amzn2.i686  
    glibc-langpack-ht-2.26-57.amzn2.i686  
    glibc-langpack-hu-2.26-57.amzn2.i686  
    glibc-langpack-hy-2.26-57.amzn2.i686  
    glibc-langpack-ia-2.26-57.amzn2.i686  
    glibc-langpack-id-2.26-57.amzn2.i686  
    glibc-langpack-ig-2.26-57.amzn2.i686  
    glibc-langpack-ik-2.26-57.amzn2.i686  
    glibc-langpack-is-2.26-57.amzn2.i686  
    glibc-langpack-it-2.26-57.amzn2.i686  
    glibc-langpack-iu-2.26-57.amzn2.i686  
    glibc-langpack-ja-2.26-57.amzn2.i686  
    glibc-langpack-ka-2.26-57.amzn2.i686  
    glibc-langpack-kk-2.26-57.amzn2.i686  
    glibc-langpack-kl-2.26-57.amzn2.i686  
    glibc-langpack-km-2.26-57.amzn2.i686  
    glibc-langpack-kn-2.26-57.amzn2.i686  
    glibc-langpack-ko-2.26-57.amzn2.i686  
    glibc-langpack-kok-2.26-57.amzn2.i686  
    glibc-langpack-ks-2.26-57.amzn2.i686  
    glibc-langpack-ku-2.26-57.amzn2.i686  
    glibc-langpack-kw-2.26-57.amzn2.i686  
    glibc-langpack-ky-2.26-57.amzn2.i686  
    glibc-langpack-lb-2.26-57.amzn2.i686  
    glibc-langpack-lg-2.26-57.amzn2.i686  
    glibc-langpack-li-2.26-57.amzn2.i686  
    glibc-langpack-lij-2.26-57.amzn2.i686  
    glibc-langpack-ln-2.26-57.amzn2.i686  
    glibc-langpack-lo-2.26-57.amzn2.i686  
    glibc-langpack-lt-2.26-57.amzn2.i686  
    glibc-langpack-lv-2.26-57.amzn2.i686  
    glibc-langpack-lzh-2.26-57.amzn2.i686  
    glibc-langpack-mag-2.26-57.amzn2.i686  
    glibc-langpack-mai-2.26-57.amzn2.i686  
    glibc-langpack-mg-2.26-57.amzn2.i686  
    glibc-langpack-mhr-2.26-57.amzn2.i686  
    glibc-langpack-mi-2.26-57.amzn2.i686  
    glibc-langpack-mk-2.26-57.amzn2.i686  
    glibc-langpack-ml-2.26-57.amzn2.i686  
    glibc-langpack-mn-2.26-57.amzn2.i686  
    glibc-langpack-mni-2.26-57.amzn2.i686  
    glibc-langpack-mr-2.26-57.amzn2.i686  
    glibc-langpack-ms-2.26-57.amzn2.i686  
    glibc-langpack-mt-2.26-57.amzn2.i686  
    glibc-langpack-my-2.26-57.amzn2.i686  
    glibc-langpack-nan-2.26-57.amzn2.i686  
    glibc-langpack-nb-2.26-57.amzn2.i686  
    glibc-langpack-nds-2.26-57.amzn2.i686  
    glibc-langpack-ne-2.26-57.amzn2.i686  
    glibc-langpack-nhn-2.26-57.amzn2.i686  
    glibc-langpack-niu-2.26-57.amzn2.i686  
    glibc-langpack-nl-2.26-57.amzn2.i686  
    glibc-langpack-nn-2.26-57.amzn2.i686  
    glibc-langpack-nr-2.26-57.amzn2.i686  
    glibc-langpack-nso-2.26-57.amzn2.i686  
    glibc-langpack-oc-2.26-57.amzn2.i686  
    glibc-langpack-om-2.26-57.amzn2.i686  
    glibc-langpack-or-2.26-57.amzn2.i686  
    glibc-langpack-os-2.26-57.amzn2.i686  
    glibc-langpack-pa-2.26-57.amzn2.i686  
    glibc-langpack-pap-2.26-57.amzn2.i686  
    glibc-langpack-pl-2.26-57.amzn2.i686  
    glibc-langpack-ps-2.26-57.amzn2.i686  
    glibc-langpack-pt-2.26-57.amzn2.i686  
    glibc-langpack-quz-2.26-57.amzn2.i686  
    glibc-langpack-raj-2.26-57.amzn2.i686  
    glibc-langpack-ro-2.26-57.amzn2.i686  
    glibc-langpack-ru-2.26-57.amzn2.i686  
    glibc-langpack-rw-2.26-57.amzn2.i686  
    glibc-langpack-sa-2.26-57.amzn2.i686  
    glibc-langpack-sat-2.26-57.amzn2.i686  
    glibc-langpack-sc-2.26-57.amzn2.i686  
    glibc-langpack-sd-2.26-57.amzn2.i686  
    glibc-langpack-se-2.26-57.amzn2.i686  
    glibc-langpack-sgs-2.26-57.amzn2.i686  
    glibc-langpack-shs-2.26-57.amzn2.i686  
    glibc-langpack-si-2.26-57.amzn2.i686  
    glibc-langpack-sid-2.26-57.amzn2.i686  
    glibc-langpack-sk-2.26-57.amzn2.i686  
    glibc-langpack-sl-2.26-57.amzn2.i686  
    glibc-langpack-so-2.26-57.amzn2.i686  
    glibc-langpack-sq-2.26-57.amzn2.i686  
    glibc-langpack-sr-2.26-57.amzn2.i686  
    glibc-langpack-ss-2.26-57.amzn2.i686  
    glibc-langpack-st-2.26-57.amzn2.i686  
    glibc-langpack-sv-2.26-57.amzn2.i686  
    glibc-langpack-sw-2.26-57.amzn2.i686  
    glibc-langpack-szl-2.26-57.amzn2.i686  
    glibc-langpack-ta-2.26-57.amzn2.i686  
    glibc-langpack-tcy-2.26-57.amzn2.i686  
    glibc-langpack-te-2.26-57.amzn2.i686  
    glibc-langpack-tg-2.26-57.amzn2.i686  
    glibc-langpack-th-2.26-57.amzn2.i686  
    glibc-langpack-the-2.26-57.amzn2.i686  
    glibc-langpack-ti-2.26-57.amzn2.i686  
    glibc-langpack-tig-2.26-57.amzn2.i686  
    glibc-langpack-tk-2.26-57.amzn2.i686  
    glibc-langpack-tl-2.26-57.amzn2.i686  
    glibc-langpack-tn-2.26-57.amzn2.i686  
    glibc-langpack-tr-2.26-57.amzn2.i686  
    glibc-langpack-ts-2.26-57.amzn2.i686  
    glibc-langpack-tt-2.26-57.amzn2.i686  
    glibc-langpack-ug-2.26-57.amzn2.i686  
    glibc-langpack-uk-2.26-57.amzn2.i686  
    glibc-langpack-unm-2.26-57.amzn2.i686  
    glibc-langpack-ur-2.26-57.amzn2.i686  
    glibc-langpack-uz-2.26-57.amzn2.i686  
    glibc-langpack-ve-2.26-57.amzn2.i686  
    glibc-langpack-vi-2.26-57.amzn2.i686  
    glibc-langpack-wa-2.26-57.amzn2.i686  
    glibc-langpack-wae-2.26-57.amzn2.i686  
    glibc-langpack-wal-2.26-57.amzn2.i686  
    glibc-langpack-wo-2.26-57.amzn2.i686  
    glibc-langpack-xh-2.26-57.amzn2.i686  
    glibc-langpack-yi-2.26-57.amzn2.i686  
    glibc-langpack-yo-2.26-57.amzn2.i686  
    glibc-langpack-yue-2.26-57.amzn2.i686  
    glibc-langpack-zh-2.26-57.amzn2.i686  
    glibc-langpack-zu-2.26-57.amzn2.i686  
    glibc-all-langpacks-2.26-57.amzn2.i686  
    glibc-minimal-langpack-2.26-57.amzn2.i686  
    nscd-2.26-57.amzn2.i686  
    nss_db-2.26-57.amzn2.i686  
    nss_nis-2.26-57.amzn2.i686  
    nss_hesiod-2.26-57.amzn2.i686  
    glibc-nss-devel-2.26-57.amzn2.i686  
    glibc-utils-2.26-57.amzn2.i686  
    glibc-debuginfo-2.26-57.amzn2.i686  
    glibc-debuginfo-common-2.26-57.amzn2.i686  
    glibc-benchtests-2.26-57.amzn2.i686  
  
src:  
    glibc-2.26-57.amzn2.src  
  
x86_64:  
    glibc-2.26-57.amzn2.x86_64  
    libcrypt-2.26-57.amzn2.x86_64  
    libcrypt-nss-2.26-57.amzn2.x86_64  
    glibc-devel-2.26-57.amzn2.x86_64  
    glibc-static-2.26-57.amzn2.x86_64  
    glibc-headers-2.26-57.amzn2.x86_64  
    glibc-common-2.26-57.amzn2.x86_64  
    glibc-locale-source-2.26-57.amzn2.x86_64  
    glibc-langpack-eo-2.26-57.amzn2.x86_64  
    glibc-langpack-aa-2.26-57.amzn2.x86_64  
    glibc-langpack-af-2.26-57.amzn2.x86_64  
    glibc-langpack-ak-2.26-57.amzn2.x86_64  
    glibc-langpack-am-2.26-57.amzn2.x86_64  
    glibc-langpack-an-2.26-57.amzn2.x86_64  
    glibc-langpack-anp-2.26-57.amzn2.x86_64  
    glibc-langpack-ar-2.26-57.amzn2.x86_64  
    glibc-langpack-as-2.26-57.amzn2.x86_64  
    glibc-langpack-ast-2.26-57.amzn2.x86_64  
    glibc-langpack-ayc-2.26-57.amzn2.x86_64  
    glibc-langpack-az-2.26-57.amzn2.x86_64  
    glibc-langpack-be-2.26-57.amzn2.x86_64  
    glibc-langpack-bem-2.26-57.amzn2.x86_64  
    glibc-langpack-ber-2.26-57.amzn2.x86_64  
    glibc-langpack-bg-2.26-57.amzn2.x86_64  
    glibc-langpack-bhb-2.26-57.amzn2.x86_64  
    glibc-langpack-bho-2.26-57.amzn2.x86_64  
    glibc-langpack-bn-2.26-57.amzn2.x86_64  
    glibc-langpack-bo-2.26-57.amzn2.x86_64  
    glibc-langpack-br-2.26-57.amzn2.x86_64  
    glibc-langpack-brx-2.26-57.amzn2.x86_64  
    glibc-langpack-bs-2.26-57.amzn2.x86_64  
    glibc-langpack-byn-2.26-57.amzn2.x86_64  
    glibc-langpack-ca-2.26-57.amzn2.x86_64  
    glibc-langpack-ce-2.26-57.amzn2.x86_64  
    glibc-langpack-chr-2.26-57.amzn2.x86_64  
    glibc-langpack-cmn-2.26-57.amzn2.x86_64  
    glibc-langpack-crh-2.26-57.amzn2.x86_64  
    glibc-langpack-cs-2.26-57.amzn2.x86_64  
    glibc-langpack-csb-2.26-57.amzn2.x86_64  
    glibc-langpack-cv-2.26-57.amzn2.x86_64  
    glibc-langpack-cy-2.26-57.amzn2.x86_64  
    glibc-langpack-da-2.26-57.amzn2.x86_64  
    glibc-langpack-de-2.26-57.amzn2.x86_64  
    glibc-langpack-doi-2.26-57.amzn2.x86_64  
    glibc-langpack-dv-2.26-57.amzn2.x86_64  
    glibc-langpack-dz-2.26-57.amzn2.x86_64  
    glibc-langpack-el-2.26-57.amzn2.x86_64  
    glibc-langpack-en-2.26-57.amzn2.x86_64  
    glibc-langpack-es-2.26-57.amzn2.x86_64  
    glibc-langpack-et-2.26-57.amzn2.x86_64  
    glibc-langpack-eu-2.26-57.amzn2.x86_64  
    glibc-langpack-fa-2.26-57.amzn2.x86_64  
    glibc-langpack-ff-2.26-57.amzn2.x86_64  
    glibc-langpack-fi-2.26-57.amzn2.x86_64  
    glibc-langpack-fil-2.26-57.amzn2.x86_64  
    glibc-langpack-fo-2.26-57.amzn2.x86_64  
    glibc-langpack-fr-2.26-57.amzn2.x86_64  
    glibc-langpack-fur-2.26-57.amzn2.x86_64  
    glibc-langpack-fy-2.26-57.amzn2.x86_64  
    glibc-langpack-ga-2.26-57.amzn2.x86_64  
    glibc-langpack-gd-2.26-57.amzn2.x86_64  
    glibc-langpack-gez-2.26-57.amzn2.x86_64  
    glibc-langpack-gl-2.26-57.amzn2.x86_64  
    glibc-langpack-gu-2.26-57.amzn2.x86_64  
    glibc-langpack-gv-2.26-57.amzn2.x86_64  
    glibc-langpack-ha-2.26-57.amzn2.x86_64  
    glibc-langpack-hak-2.26-57.amzn2.x86_64  
    glibc-langpack-he-2.26-57.amzn2.x86_64  
    glibc-langpack-hi-2.26-57.amzn2.x86_64  
    glibc-langpack-hne-2.26-57.amzn2.x86_64  
    glibc-langpack-hr-2.26-57.amzn2.x86_64  
    nscd-2.26-57.amzn2.x86_64  
    glibc-langpack-hsb-2.26-57.amzn2.x86_64  
    glibc-langpack-ht-2.26-57.amzn2.x86_64  
    glibc-langpack-hu-2.26-57.amzn2.x86_64  
    glibc-langpack-hy-2.26-57.amzn2.x86_64  
    glibc-langpack-ia-2.26-57.amzn2.x86_64  
    glibc-langpack-id-2.26-57.amzn2.x86_64  
    glibc-langpack-ig-2.26-57.amzn2.x86_64  
    glibc-langpack-ik-2.26-57.amzn2.x86_64  
    glibc-langpack-is-2.26-57.amzn2.x86_64  
    glibc-langpack-it-2.26-57.amzn2.x86_64  
    glibc-langpack-iu-2.26-57.amzn2.x86_64  
    glibc-langpack-ja-2.26-57.amzn2.x86_64  
    glibc-langpack-ka-2.26-57.amzn2.x86_64  
    glibc-langpack-kk-2.26-57.amzn2.x86_64  
    glibc-langpack-kl-2.26-57.amzn2.x86_64  
    glibc-langpack-km-2.26-57.amzn2.x86_64  
    glibc-langpack-kn-2.26-57.amzn2.x86_64  
    glibc-langpack-ko-2.26-57.amzn2.x86_64  
    glibc-langpack-kok-2.26-57.amzn2.x86_64  
    glibc-langpack-ks-2.26-57.amzn2.x86_64  
    glibc-langpack-ku-2.26-57.amzn2.x86_64  
    glibc-langpack-kw-2.26-57.amzn2.x86_64  
    glibc-langpack-ky-2.26-57.amzn2.x86_64  
    glibc-langpack-lb-2.26-57.amzn2.x86_64  
    glibc-langpack-lg-2.26-57.amzn2.x86_64  
    glibc-langpack-li-2.26-57.amzn2.x86_64  
    glibc-langpack-lij-2.26-57.amzn2.x86_64  
    glibc-langpack-ln-2.26-57.amzn2.x86_64  
    glibc-langpack-lo-2.26-57.amzn2.x86_64  
    glibc-langpack-lt-2.26-57.amzn2.x86_64  
    glibc-langpack-lv-2.26-57.amzn2.x86_64  
    glibc-langpack-lzh-2.26-57.amzn2.x86_64  
    glibc-langpack-mag-2.26-57.amzn2.x86_64  
    glibc-langpack-mai-2.26-57.amzn2.x86_64  
    glibc-langpack-mg-2.26-57.amzn2.x86_64  
    glibc-langpack-mhr-2.26-57.amzn2.x86_64  
    glibc-langpack-mi-2.26-57.amzn2.x86_64  
    glibc-langpack-mk-2.26-57.amzn2.x86_64  
    glibc-langpack-ml-2.26-57.amzn2.x86_64  
    glibc-langpack-mn-2.26-57.amzn2.x86_64  
    glibc-langpack-mni-2.26-57.amzn2.x86_64  
    glibc-langpack-mr-2.26-57.amzn2.x86_64  
    glibc-langpack-ms-2.26-57.amzn2.x86_64  
    glibc-langpack-mt-2.26-57.amzn2.x86_64  
    glibc-langpack-my-2.26-57.amzn2.x86_64  
    glibc-langpack-nan-2.26-57.amzn2.x86_64  
    glibc-langpack-nb-2.26-57.amzn2.x86_64  
    glibc-langpack-nds-2.26-57.amzn2.x86_64  
    glibc-langpack-ne-2.26-57.amzn2.x86_64  
    glibc-langpack-nhn-2.26-57.amzn2.x86_64  
    glibc-langpack-niu-2.26-57.amzn2.x86_64  
    glibc-langpack-nl-2.26-57.amzn2.x86_64  
    glibc-langpack-nn-2.26-57.amzn2.x86_64  
    glibc-langpack-nr-2.26-57.amzn2.x86_64  
    glibc-langpack-nso-2.26-57.amzn2.x86_64  
    glibc-langpack-oc-2.26-57.amzn2.x86_64  
    glibc-langpack-om-2.26-57.amzn2.x86_64  
    glibc-langpack-or-2.26-57.amzn2.x86_64  
    glibc-langpack-os-2.26-57.amzn2.x86_64  
    glibc-langpack-pa-2.26-57.amzn2.x86_64  
    glibc-langpack-pap-2.26-57.amzn2.x86_64  
    glibc-langpack-pl-2.26-57.amzn2.x86_64  
    glibc-langpack-ps-2.26-57.amzn2.x86_64  
    glibc-langpack-pt-2.26-57.amzn2.x86_64  
    glibc-langpack-quz-2.26-57.amzn2.x86_64  
    glibc-langpack-raj-2.26-57.amzn2.x86_64  
    glibc-langpack-ro-2.26-57.amzn2.x86_64  
    glibc-langpack-ru-2.26-57.amzn2.x86_64  
    glibc-langpack-rw-2.26-57.amzn2.x86_64  
    glibc-langpack-sa-2.26-57.amzn2.x86_64  
    glibc-langpack-sat-2.26-57.amzn2.x86_64  
    glibc-langpack-sc-2.26-57.amzn2.x86_64  
    glibc-langpack-sd-2.26-57.amzn2.x86_64  
    glibc-langpack-se-2.26-57.amzn2.x86_64  
    glibc-langpack-sgs-2.26-57.amzn2.x86_64  
    glibc-langpack-shs-2.26-57.amzn2.x86_64  
    glibc-langpack-si-2.26-57.amzn2.x86_64  
    glibc-langpack-sid-2.26-57.amzn2.x86_64  
    glibc-langpack-sk-2.26-57.amzn2.x86_64  
    glibc-langpack-sl-2.26-57.amzn2.x86_64  
    glibc-langpack-so-2.26-57.amzn2.x86_64  
    glibc-langpack-sq-2.26-57.amzn2.x86_64  
    glibc-langpack-sr-2.26-57.amzn2.x86_64  
    glibc-langpack-ss-2.26-57.amzn2.x86_64  
    glibc-langpack-st-2.26-57.amzn2.x86_64  
    glibc-langpack-sv-2.26-57.amzn2.x86_64  
    glibc-langpack-sw-2.26-57.amzn2.x86_64  
    glibc-langpack-szl-2.26-57.amzn2.x86_64  
    glibc-langpack-ta-2.26-57.amzn2.x86_64  
    glibc-langpack-tcy-2.26-57.amzn2.x86_64  
    glibc-langpack-te-2.26-57.amzn2.x86_64  
    glibc-langpack-tg-2.26-57.amzn2.x86_64  
    glibc-langpack-th-2.26-57.amzn2.x86_64  
    glibc-langpack-the-2.26-57.amzn2.x86_64  
    glibc-langpack-ti-2.26-57.amzn2.x86_64  
    glibc-langpack-tig-2.26-57.amzn2.x86_64  
    glibc-langpack-tk-2.26-57.amzn2.x86_64  
    glibc-langpack-tl-2.26-57.amzn2.x86_64  
    glibc-langpack-tn-2.26-57.amzn2.x86_64  
    glibc-langpack-tr-2.26-57.amzn2.x86_64  
    glibc-langpack-ts-2.26-57.amzn2.x86_64  
    glibc-langpack-tt-2.26-57.amzn2.x86_64  
    glibc-langpack-ug-2.26-57.amzn2.x86_64  
    glibc-langpack-uk-2.26-57.amzn2.x86_64  
    glibc-langpack-unm-2.26-57.amzn2.x86_64  
    glibc-langpack-ur-2.26-57.amzn2.x86_64  
    glibc-langpack-uz-2.26-57.amzn2.x86_64  
    glibc-langpack-ve-2.26-57.amzn2.x86_64  
    glibc-langpack-vi-2.26-57.amzn2.x86_64  
    glibc-langpack-wa-2.26-57.amzn2.x86_64  
    glibc-langpack-wae-2.26-57.amzn2.x86_64  
    glibc-langpack-wal-2.26-57.amzn2.x86_64  
    glibc-langpack-wo-2.26-57.amzn2.x86_64  
    glibc-langpack-xh-2.26-57.amzn2.x86_64  
    glibc-langpack-yi-2.26-57.amzn2.x86_64  
    glibc-langpack-yo-2.26-57.amzn2.x86_64  
    glibc-langpack-yue-2.26-57.amzn2.x86_64  
    glibc-langpack-zh-2.26-57.amzn2.x86_64  
    glibc-langpack-zu-2.26-57.amzn2.x86_64  
    glibc-all-langpacks-2.26-57.amzn2.x86_64  
    glibc-minimal-langpack-2.26-57.amzn2.x86_64  
    nss_db-2.26-57.amzn2.x86_64  
    nss_nis-2.26-57.amzn2.x86_64  
    nss_hesiod-2.26-57.amzn2.x86_64  
    glibc-nss-devel-2.26-57.amzn2.x86_64  
    glibc-utils-2.26-57.amzn2.x86_64  
    glibc-debuginfo-2.26-57.amzn2.x86_64  
    glibc-debuginfo-common-2.26-57.amzn2.x86_64  
    glibc-benchtests-2.26-57.amzn2.x86_64  

Additional References

Red Hat: CVE-2021-33574, CVE-2021-38604

Mitre: CVE-2021-33574, CVE-2021-38604

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%