Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4954-1
HistoryMay 14, 2021 - 12:00 a.m.

GNU C Library vulnerabilities

2021-05-1400:00:00
ubuntu.com
145
ubuntu 16.04 esm
glibc
integer underflow
regex parsing
denial of service
arbitrary code
arm processors
cve-2020-6096
cve-2009-5155
gnu c library

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.074

Percentile

94.1%

JSON

Releases

  • Ubuntu 16.04 ESM

Packages

  • glibc - GNU C Library

Details

Jason Royes and Samuel Dytrych discovered that the memcpy()
implementation for 32 bit ARM processors in the GNU C Library contained
an integer underflow vulnerability. An attacker could possibly use
this to cause a denial of service (application crash) or execute
arbitrary code. (CVE-2020-6096)

It was discovered that the POSIX regex implementation in the GNU C
Library did not properly parse alternatives. An attacker could use this
to cause a denial of service. (CVE-2009-5155)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibc6< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchglibc-doc< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchglibc-source< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-bin< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-bin-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-dev-bin< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-dev-bin-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6-dbg< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6-dev< 2.23-0ubuntu11.3UNKNOWN
Rows per page:
1-10 of 241

Related

osv 4
nessus 24
openvas 17
cve 2
ubuntucve 2
f5 2
cvelist 2
redhatcve 2
prion 2
nvd 2
debiancve 2
talos 1
fedora 3
cbl_mariner 1
amazon 2
altlinux 1
mageia 1
gentoo 1
photon 2
ubuntu 1
cloudfoundry 1
debian 1
rosalinux 1
ibm 3
ics 1
avleonov 1
osv
osv
glibc vulnerabilities
2021-05-14 00:19:34
CVE-2020-6096
2020-04-01 22:15:18
glibc vulnerabilities
2022-03-01 15:09:40
nessus
nessus
Ubuntu 16.04 LTS : GNU C Library vulnerabilities (USN-4954-1)
2021-05-14 00:00:00
F5 Networks BIG-IP : GNU C Library vulnerability (K64119434)
2022-09-20 00:00:00
Photon OS 2.0: Glibc PHSA-2019-2.0-0160
2019-05-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4954-1)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1849)
2020-08-31 00:00:00
Fedora: Security Advisory for glibc (FEDORA-2020-d860479b2a)
2020-07-20 00:00:00
cve
cve
CVE-2009-5155
2019-02-26 02:29:00
CVE-2020-6096
2020-04-01 22:15:18
ubuntucve
ubuntucve
CVE-2009-5155
2019-02-26 00:00:00
CVE-2020-6096
2020-04-01 00:00:00
f5
f5
K64119434 : GNU C Library vulnerability CVE-2009-5155
2019-03-25 00:00:00
K40977030 : glibc vulnerability CVE-2020-6096
2020-04-28 00:00:00
cvelist
cvelist
CVE-2009-5155
2019-02-26 02:00:00
CVE-2020-6096
2020-04-01 00:00:00
redhatcve
redhatcve
CVE-2009-5155
2019-02-27 15:20:01
CVE-2020-6096
2020-04-02 19:01:25
prion
prion
Design/Logic Flaw
2019-02-26 02:29:00
Design/Logic Flaw
2020-04-01 22:15:00
nvd
nvd
CVE-2009-5155
2019-02-26 02:29:00
CVE-2020-6096
2020-04-01 22:15:18
debiancve
debiancve
CVE-2009-5155
2019-02-26 02:29:00
CVE-2020-6096
2020-04-01 22:15:18
talos
talos
GNU glibc ARMv7 memcpy() memory corruption vulnerability
2020-05-21 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: glibc-2.31-4.fc32
2020-07-19 01:11:50
[SECURITY] Fedora 31 Update: glibc-2.30-13.fc31
2020-08-02 01:09:34
[SECURITY] Fedora 32 Update: glibc-2.31-5.fc32
2021-01-20 01:28:29
cbl_mariner
cbl_mariner
CVE-2020-6096 affecting package glibc 2.28-24
2020-10-08 18:09:54
amazon
amazon
Medium: glibc
2022-10-31 19:40:00
Important: glibc
2021-02-19 01:17:00
altlinux
altlinux
Security fix for the ALT Linux 9 package glibc version 6:2.27-alt13
2020-11-23 00:00:00
mageia
mageia
Updated glibc packages fix security vulnerability
2021-01-24 03:36:09
gentoo
gentoo
glibc: Multiple vulnerabilities
2021-01-25 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0160
2019-05-23 00:00:00
Critical Photon OS Security Update - PHSA-2019-0160
2019-05-24 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2022-03-01 00:00:00
cloudfoundry
cloudfoundry
USN-5310-1: GNU C Library vulnerabilities | Cloud Foundry
2023-05-18 00:00:00
debian
debian
[SECURITY] [DLA 3152-1] glibc security update
2022-10-17 15:54:41
rosalinux
rosalinux
Advisory ROSA-SA-2021-1844
2021-07-02 16:56:21
ibm
ibm
Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.
2024-07-31 11:01:16
Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
2023-04-11 11:47:27
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities
2024-06-26 09:20:14
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.074

Percentile

94.1%

JSON
Related for USN-4954-1
osv4nessus24openvas17cve2ubuntucve2f52cvelist2redhatcve2prion2nvd2debiancve2talos1fedora3cbl_mariner1amazon2altlinux1mageia1gentoo1photon2ubuntu1cloudfoundry1debian1rosalinux1ibm3ics1avleonov1