The vulnerability of the GNU C Library’s system library, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

🗓️ 14 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

GNU C Library vulnerability allows out-of-bounds memory access, risking data leakage.

Reporter	Title	Published	Views	Family All 181
IBM Security Bulletins	Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerability (CVE-2017-1000366)	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSource GNU Glibc affect IBM Netezza Host Management	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Network Protection is affected by a vulnerability in glibc	16 Jun 201822:01	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in sudo, glibc affect IBM SmartCloud Entry (CVE-2017-1000368 CVE-2017-1000366)	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in glibc affects PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source GNU glibc Vulnerabilities which is used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-1000366)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in glibc affects IBM Flex System Manager (FSM) (CVE-2017-1000366)	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in products bundled with IBM Security Directory Suite 8.0.1	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm

Vulners

Node

gnu glibcRange≤2.25

Source	Link
securityfocus	www.securityfocus.com/bid/99127
access	www.access.redhat.com/errata/RHSA-2017:1712
access	www.access.redhat.com/security/cve/CVE-2017-1000366
kc	www.kc.mcafee.com/corporate/index
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-1000366
security	www.security.gentoo.org/glsa/201706-19
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-1000366
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
debian	www.debian.org/security/2017/dsa-3887
exploit-db	www.exploit-db.com/exploits/42274/

14 Nov 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

CVSS 37.8

EPSS0.02733

gnu c library memory access out of bounds data leakage vulnerability service disruption