glibc
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-0577 | 2.39-28.fc40 – 2.39-33.fc40 ; 2.40-12.fc41 – 2.40-17.fc41 | Glibc: vdso getrandom acceleration may return predictable randomness | MEDIUM 4.8 | 0.2 % | ||
| CVE-2023-6780 | fixed in 2.39 | Glibc: integer overflow in __vsyslog_internal() | MEDIUM 5.3 | 2.7 % | ||
| CVE-2023-6779 | fixed in 2.39 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | HIGH 8.2 | 3.2 % | ||
| CVE-2023-6246 | fixed in 2.39 | Glibc: heap-based buffer overflow in __vsyslog_internal() | HIGH 8.4 | 4.8 % | ||
| CVE-2023-4911 | 2.34 – < 2.39 | Glibc: buffer overflow in ld.so leading to privilege escalation | HIGH 7.8 | 64 % | KEV | |
| CVE-2021-3999 | Fixed in glibc v2.31 and above. | A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer | HIGH 7.8 | 0.8 % | ||
| CVE-2021-3998 | Affects glibc v2.33 and above. | A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and | HIGH 7.5 | 2.2 % |