8.7 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.8%
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.
www.securityfocus.com/bid/101521
access.redhat.com/errata/RHSA-2018:0805
access.redhat.com/errata/RHSA-2018:1879
sourceware.org/bugzilla/show_bug.cgi?id=22320