A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.

CPENameOperatorVersion
glibceq2.1.1

CPE	Name	Operator	Version
	glibc	eq	2.1.1

References

seclists.org/oss-sec/2017/q4/385

www.openwall.com/lists/oss-security/2019/06/27/7

www.openwall.com/lists/oss-security/2019/06/28/1

www.openwall.com/lists/oss-security/2019/06/28/2

security.netapp.com/advisory/ntap-20190404-0003/

www.exploit-db.com/exploits/43331/

redhatcve 3

debiancve 3

ubuntucve 3

osv 5

cve 3

packetstorm 2

f5 2

exploitpack 4

exploitdb 4

nessus 48

openvas 32

ibm 16

oraclelinux 5

suse 10

centos 2

archlinux 2

prion 2

fedora 6

veracode 1

cloudfoundry 2

redhat 5

slackware 1

debian 2

amazon 1

ubuntu 3

lenovo 2

gentoo 1

mageia 1

photon 2

redhatcve

CVE-2017-1000408

2017-12-12 09:49:57

CVE-2017-1000366

2017-06-19 15:18:36

CVE-2017-1000409

2017-12-12 09:49:40

debiancve

CVE-2017-1000408

2018-02-01 04:29:00

CVE-2017-1000366

2017-06-19 16:29:00

CVE-2017-1000409

2018-02-01 04:29:00

ubuntucve

CVE-2017-1000408

2017-12-13 00:00:00

CVE-2017-1000366

2017-06-19 00:00:00

CVE-2017-1000409

2017-12-13 00:00:00

osv

CVE-2017-1000408

2018-02-01 04:29:00

CVE-2017-1000366

2017-06-19 16:29:00

eglibc - security update

2017-06-19 00:00:00

cve

CVE-2017-1000408

2018-02-01 04:29:00

CVE-2017-1000366

2017-06-19 16:29:00

CVE-2017-1000409

2018-02-01 04:29:00

packetstorm

Qualys Security Advisory - GNU C Library Memory Leak / Buffer Overflow

2017-12-13 00:00:00

Cisco Device Hardcoded Credentials / GNU glibc / BusyBox

2019-09-04 00:00:00

K72813580 : glibc vulnerabilities CVE-2017-1000408 and CVE-2017-1000409

2018-03-15 00:00:00

K20486351 : glibc vulnerability CVE-2017-1000366

2017-07-11 00:00:00

exploitpack

GNU C Library Dynamic Loader glibc ld.so - Memory Leak Buffer Overflow

2017-12-13 00:00:00

Linux Kernel (Debian 910 Ubuntu 14.04.516.04.217.04 Fedora 232425) - ldso_dynamic Stack Clash Local Privilege Escalation

2017-06-28 00:00:00

Linux Kernel (Debian 7.78.59.0 Ubuntu 14.04.216.04.217.04 Fedora 2225 CentOS 7.3.1611) - ldso_hwcap_64 Stack Clash Local Privilege Escalation

2017-06-28 00:00:00

exploitdb

GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow

2017-12-13 00:00:00

Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation

2017-06-28 00:00:00

Linux Kernel (Debian 7/8/9/10 / Fedora 23/24/25 / CentOS 5.3/5.11/6.0/6.8/7.2.1511) - 'ldso_hwcap Stack Clash' Local Privilege Escalation

2017-06-28 00:00:00

nessus

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2021-1412)

2021-03-10 00:00:00

Debian DLA-992-1 : eglibc security update (Stack Clash)

2017-06-20 00:00:00

Oracle Linux 7 : glibc (ELSA-2017-1481) (Stack Clash)

2017-06-20 00:00:00

openvas

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1412)

2021-03-05 00:00:00

RedHat Update for glibc RHSA-2017:1481-01

2017-06-20 00:00:00

Debian: Security Advisory (DLA-992-1)

2018-01-28 00:00:00

ibm

Security Bulletin: IBM QRadar Network Security is affected by a vulnerability in glibc (CVE-2017-1000366)

2018-06-16 22:01:12

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerability (CVE-2017-1000366)

2018-06-16 22:05:03

Security Bulletin: Open Source GNU glibc Vulnerabilities which is used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-1000366)

2018-06-15 07:08:06

oraclelinux

glibc security update

2017-06-19 00:00:00

glibc security update

2017-06-19 00:00:00

glibc security update

2017-07-06 00:00:00

suse

Security update for glibc (important)

2017-06-21 03:09:06

Security update for glibc (important)

2017-06-19 21:16:12

Security update for glibc (important)

2017-06-19 21:12:36

centos

glibc, nscd security update

2017-06-20 10:48:53

glibc, nscd security update

2017-06-20 08:39:12

archlinux

[ASA-201706-23] glibc: privilege escalation

2017-06-20 00:00:00

[ASA-201706-22] lib32-glibc: privilege escalation

2017-06-20 00:00:00

prion

Design/Logic Flaw

2017-06-19 16:29:00

Buffer overflow

2018-02-01 04:29:00

fedora

[SECURITY] Fedora 24 Update: glibc-2.23.1-12.fc24

2017-06-24 20:51:10

[SECURITY] Fedora 26 Update: glibc-2.25-6.fc26

2017-06-22 13:41:59

[SECURITY] Fedora 25 Update: glibc-2.24-8.fc25

2017-06-23 01:59:06

veracode

Arbitrary Code Execution

2019-01-15 09:17:40

cloudfoundry

USN-3323-1: GNU C Library vulnerability | Cloud Foundry

2017-06-22 00:00:00

USN-3534-1: GNU C Library vulnerabilities | Cloud Foundry

2018-02-01 00:00:00

redhat

(RHSA-2017:1480) Important: glibc security update

2017-06-19 15:08:21

(RHSA-2017:1481) Important: glibc security update

2017-06-19 15:07:57

(RHSA-2017:1479) Important: glibc security update

2017-06-19 00:00:00

slackware

[slackware-security] glibc

2017-06-30 22:17:14

debian

[SECURITY] [DLA 992-1] eglibc security update

2017-06-19 19:56:25

[SECURITY] [DSA 3887-1] glibc security update

2017-06-19 15:32:03

amazon

Critical: glibc

2017-06-19 08:51:00

ubuntu

GNU C Library vulnerability

2017-06-29 00:00:00

GNU C Library vulnerability

2017-06-19 00:00:00

GNU C Library vulnerabilities

2018-01-17 00:00:00

lenovo

Lenovo StorSelect DX8200C glibc, Linux Kernel and Cloudian Management Console Vulnerabilities - Lenovo Support US

2017-10-26 00:00:00

Lenovo StorSelect DX8200C glibc, Linux Kernel and Cloudian Management Console Vulnerabilities - us

2017-10-26 00:00:00

gentoo

GNU C Library: Multiple vulnerabilities

2017-06-20 00:00:00

mageia

Updated glibc packages fixes critical security vulnerabilities

2017-06-27 00:37:03

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0023

2017-07-10 00:00:00

Important Photon OS Security Update - PHSA-2017-0053

2017-07-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.4%

JSON

Related for PRION:CVE-2017-1000408