7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.5%
glibc is the GNU C library.
A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too small to hold all the user’s groups. This overflow can cause segmentation faults in user applications. This vulnerability exists only when an administrator has placed a user in a number of groups larger than that expected by an application.
Applications that use getgrouplist can crash.
There is no known workaround at this time.
It is recommended that all Gentoo Linux users update their systems as follows:
# emerge sync
# emerge -pv '>=sys-libs/glibc-2.2.5'
# emerge '>=sys-libs/glibc-2.2.5'
# emerge clean
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | sys-libs/glibc | <= 2.2.4 | UNKNOWN |