Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu glibc 2.33 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-33574
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat...
Gnu Glibc 2.33Gnu Glibc 2.32Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Backup -Netapp E-series Santricity Os ControllerNetapp Solidfire Baseboard Management Controller Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Debian Debian Linux 10.0
2.5
CVSSv3
CVE-2021-27645
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 up to and including 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is...
Gnu GlibcFedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 10.0
7.5
CVSSv3
CVE-2020-29573
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) prior to 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x0...
Gnu GlibcRedhat Enterprise Linux 7.0Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller -
9.1
CVSSv3
CVE-2021-35942
The wordexp function in the GNU C Library (aka glibc) up to and including 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This oc...
Gnu GlibcNetapp Ontap Select Deploy Administration Utility -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerDebian Debian Linux 10.0
5.5
CVSSv3
CVE-2020-27618
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and previous versions, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in appl...
Gnu GlibcNetapp Ontap Select Deploy Administration Utility -Netapp A250 Firmware -Netapp 500f Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Debian Debian Linux 10.0
5.9
CVSSv3
CVE-2023-4806
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hoo...
Gnu Glibc 2.33Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook