The vulnerability of the `glob` function in the `glob.c` library, which handles system calls and core system functions of `glibc`, allows attackers to cause an unexpected termination of the application.

🗓️ 14 Nov 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A glibc glob.c bug causes memory overflow during home directory handling, enabling crashes via the ~ operator.

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU C Library affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems (CVE-2017-15670)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in GNU C Library (CVE-2017-15804 CVE-2017-15670 CVE-2015-5180)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source GNU glibc Vulnerabilities affect IBM Netezza Host Management	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Glibc affect Power Hardware Management Console ( CVE-2017-15670, CVE-2017-12132, CVE-2015-5180, CVE-2014-9402)	22 Sep 202123:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2011-5320, CVE-2017-15670, CVE-2017-15671, CVE-2017-15804)	29 Aug 201803:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by glibc vulnerabilities	4 Jan 201911:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU C library (glibc) affects IBM SONAS	2 Nov 201805:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	9 Jan 201922:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm

Vulners

Node

gnu glibcRange≤2.26

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-15670
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-15670
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
web	www.web.nvd.nist.gov/view/vuln/detail
securityfocus	www.securityfocus.com/bid/101521

30 Sep 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

CVSS 39.8

EPSS0.00218

GNU C library Glob function Glob.c vulnerability Home directory overflow Memory overflow Remote crash