Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.32 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2021-33574
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat...
Gnu Glibc 2.33Gnu Glibc 2.32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Backup -Netapp E-series Santricity Os ControllerNetapp Solidfire Baseboard Management Controller Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Debian Debian Linux 10.0
7.1
CVSSv2
CVE-2019-25013
The iconv feature in the GNU C Library (aka glibc or libc6) up to and including 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
Gnu GlibcFedoraproject Fedora 32Fedoraproject Fedora 33Netapp Ontap Select Deploy Administration Utility -Netapp Service Processor -Broadcom Fabric Operating System -Netapp A250 Firmware -Netapp 500f Firmware -Debian Debian Linux 10.0
5
CVSSv2
CVE-2021-3326
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and previous versions, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
Gnu GlibcNetapp Ontap Select Deploy Administration Utility -Netapp E-series Santricity Os ControllerOracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0Fujitsu M10-1 FirmwareFujitsu M10-4 FirmwareFujitsu M10-4s FirmwareFujitsu M12-1 FirmwareFujitsu M12-2 FirmwareFujitsu M12-2s FirmwareDebian Debian Linux 10.0
5
CVSSv2
CVE-2020-29573
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) prior to 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x0...
Gnu GlibcRedhat Enterprise Linux 7.0Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller -
3.7
CVSSv2
CVE-2020-1752
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by cre...
Gnu GlibcCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerNetapp Solidfire -Netapp Hci Management Node -Netapp H410c Firmware -Debian Debian Linux 10.0
2.1
CVSSv2
CVE-2020-27618
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and previous versions, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in appl...
Gnu GlibcNetapp Ontap Select Deploy Administration Utility -Netapp A250 Firmware -Netapp 500f Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Debian Debian Linux 10.0
2.1
CVSSv2
CVE-2020-29562
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
Gnu GlibcFedoraproject Fedora 32Netapp E-series Santricity Os Controller
2.1
CVSSv2
CVE-2020-10029
The GNU C Library (aka glibc or libc6) prior to 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is rel...
Gnu GlibcFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp H410c Firmware -Debian Debian Linux 10.0
2.1
CVSSv2
CVE-2019-19126
On the x86-64 architecture, the GNU C Library (aka glibc) prior to 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local malicious users to restrict the possible mapping addresses for loaded lib...
Gnu GlibcCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Fedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook