ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-6238 CVE-2026-6238 in glibc - Patched by Root

Root has patched CVE-2026-6238 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2018-20796 CVE-2018-20796 in glibc - Patched by Root

Root has patched CVE-2018-20796 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2019-1010023 CVE-2019-1010023 in glibc - Patched by Root

Root has patched CVE-2019-1010023 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2019-1010022 CVE-2019-1010022 in glibc - Patched by Root

Root has patched CVE-2019-1010022 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2019-9192 CVE-2019-9192 in glibc - Patched by Root

Root has patched CVE-2019-9192 in the glibc package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-6368

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

CVE-2026-6791

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

GHSA-CH73-G8QV-R6R5 vulnerabilities

Vulnerabilities for packages: glibc...

GHSA-CH73-G8QV-R6R5 vulnerabilities

Vulnerabilities for packages: glibc...

RHBA-2024:2413 Red Hat Bug Fix Advisory: glibc bug fix and enhancement update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-6368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which o...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

glibc: glibc: Process abort due to invalid memory in wordexp

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.1.hum1 aarch64, x8664 glibc-2.43-8.1.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.1.hum1 aarch64, x8664 glibc-benchtests-2.43-8.1.hum1 aarch64, x8664...

DEBIAN-CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...