Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202405-17
HistoryMay 06, 2024 - 12:00 a.m.

glibc: Multiple Vulnerabilities

2024-05-0600:00:00
Gentoo Foundation
security.gentoo.org
34
glibc
multiple vulnerabilities
upgrade
package
gnu c library
cve identifiers
workaround

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

17.2%

JSON

Background

glibc is a package that contains the GNU C library.

Description

Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All glibc users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-libs/glibc-2.38-r13"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-libs/glibc< 2.38-r13UNKNOWN

Related

openvas 27
nessus 53
redhat 21
osv 20
oraclelinux 9
almalinux 3
rocky 3
ubuntu 1
slackware 1
debian 2
mageia 1
redos 1
photon 3
ibm 9
ubuntucve 4
cbl_mariner 4
debiancve 4
cvelist 4
cgr 4
cloudlinux 1
vulnrichment 4
cve 4
wolfi 4
redhatcve 4
nvd 4
f5 1
cloudfoundry 1
fedora 1
githubexploit 1
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1932)
2024-07-16 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2179)
2024-08-20 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2137)
2024-08-20 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : glibc (EulerOS-SA-2024-1932)
2024-07-16 00:00:00
AlmaLinux 9 : glibc (ALSA-2024:3339)
2024-05-28 00:00:00
RHEL 7 : glibc (RHSA-2024:3588)
2024-06-04 00:00:00
redhat
redhat
(RHSA-2024:4126) Important: Red Hat Service Interconnect 1.4.5 Release security update
2024-06-26 13:54:29
(RHSA-2024:3411) Important: glibc security update
2024-05-28 12:59:30
(RHSA-2024:3339) Important: glibc security update
2024-05-23 12:42:04
osv
osv
Important: glibc security update
2024-05-23 00:00:00
Security update for glibc
2024-06-11 07:40:57
Important: glibc security update
2024-06-14 14:00:33
oraclelinux
oraclelinux
glibc security update
2024-05-29 00:00:00
glibc security update
2024-07-03 00:00:00
glibc security update
2024-06-18 00:00:00
almalinux
almalinux
Important: glibc security update
2024-05-23 00:00:00
Important: glibc security update
2024-05-23 00:00:00
Important: glibc security update
2024-05-22 00:00:00
rocky
rocky
glibc security update
2024-06-14 14:00:33
glibc security update
2024-06-14 13:59:16
glibc security update
2024-05-09 18:50:30
ubuntu
ubuntu
GNU C Library vulnerabilities
2024-05-31 00:00:00
slackware
slackware
[slackware-security] glibc
2024-07-23 19:09:08
debian
debian
[SECURITY] [DSA 5678-1] glibc security update
2024-05-03 19:53:11
[SECURITY] [DSA 5673-1] glibc security update
2024-04-23 07:11:00
mageia
mageia
Updated glibc packages fix security vulnerabilities
2024-05-10 19:09:48
redos
redos
ROS-20240815-07
2024-08-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0293
2024-06-17 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0633
2024-06-17 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0770
2024-07-05 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
2024-09-03 17:51:10
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to glibc, Golang Go , Apache HTTP, IBM GSKit-Crypto and GnuTLS packages/liberaries .
2024-05-22 09:19:09
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues
2024-08-08 17:29:08
ubuntucve
ubuntucve
CVE-2024-33602
2024-05-06 00:00:00
CVE-2024-33600
2024-05-06 00:00:00
CVE-2024-33599
2024-05-06 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-33600 affecting package glibc for versions less than 2.35-7
2024-05-14 05:06:12
CVE-2024-33601 affecting package glibc for versions less than 2.35-7
2024-05-14 05:06:12
CVE-2024-33599 affecting package glibc for versions less than 2.35-7
2024-05-14 05:06:12
debiancve
debiancve
CVE-2024-33600
2024-05-06 20:15:11
CVE-2024-33601
2024-05-06 20:15:11
CVE-2024-33602
2024-05-06 20:15:11
cvelist
cvelist
CVE-2024-33600 nscd: Null pointer crashes after notfound response
2024-05-06 19:22:02
CVE-2024-33601 nscd: netgroup cache may terminate daemon on memory allocation failure
2024-05-06 19:22:07
CVE-2024-33602 nscd: netgroup cache assumes NSS callback uses in-buffer strings
2024-05-06 19:22:12
cgr
cgr
CVE-2024-33600 vulnerabilities
2024-05-19 03:07:16
CVE-2024-33601 vulnerabilities
2024-05-19 03:07:16
CVE-2024-33602 vulnerabilities
2024-05-19 03:07:16
cloudlinux
cloudlinux
glibc: Fix of CVE-2024-33599
2024-06-20 16:37:00
vulnrichment
vulnrichment
CVE-2024-33602 nscd: netgroup cache assumes NSS callback uses in-buffer strings
2024-05-06 19:22:12
CVE-2024-33600 nscd: Null pointer crashes after notfound response
2024-05-06 19:22:02
CVE-2024-33599 nscd: Stack-based buffer overflow in netgroup cache
2024-05-06 19:21:54
cve
cve
CVE-2024-33602
2024-05-06 20:15:11
CVE-2024-33601
2024-05-06 20:15:11
CVE-2024-33599
2024-05-06 20:15:11
wolfi
wolfi
CVE-2024-33602 vulnerabilities
2024-10-08 09:12:22
CVE-2024-33599 vulnerabilities
2024-10-08 09:12:22
CVE-2024-33600 vulnerabilities
2024-10-08 09:12:22
redhatcve
redhatcve
CVE-2024-33599
2024-04-25 18:07:07
CVE-2024-33601
2024-04-25 18:07:26
CVE-2024-33600
2024-04-25 18:07:16
nvd
nvd
CVE-2024-33602
2024-05-06 20:15:11
CVE-2024-33599
2024-05-06 20:15:11
CVE-2024-33601
2024-05-06 20:15:11
f5
f5
K000141049: glibc vulnerability CVE-2024-33601
2024-09-12 00:00:00
cloudfoundry
cloudfoundry
USN-6737-1: GNU C Library vulnerability | Cloud Foundry
2024-05-23 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: glibc-2.38-18.fc39
2024-04-20 01:03:48
githubexploit
githubexploit
Exploit for CVE-2024-2961
2024-05-30 13:45:43

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

17.2%

JSON
Related for GLSA-202405-17
openvas27nessus53redhat21osv20oraclelinux9almalinux3rocky3ubuntu1slackware1debian2mageia1redos1photon3ibm9ubuntucve4cbl_mariner4debiancve4cvelist4cgr4cloudlinux1vulnrichment4cve4wolfi4redhatcve4nvd4f51cloudfoundry1fedora1githubexploit1