Known vulnerabilities in glibc
Vendor:
Fedoraproject
Software:
glibc
Software CPE:
cpe:2.3:o:fedoraproject:glibc:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
65
Public exploits:
9
Known exploited (KEV):
2
Breakdown by Severity Chart
2.42-12.fc43
2.43-4.fc44
2.42-9.fc43
2.41-9.fc42
2.40-27.fc41
2.40-26.fc41
2.41-7.fc42
2.30-13.fc31
2.31-4.fc32
2.30-11.fc31
2.31-2.fc32
2.29-29.fc30
2.29-28.fc30
2.30-10.fc31
2.28-22.fc29
2.27-35.fc28
2.26-32.fc27
2.26-30.fc27
2.27-15.fc28
2.27-14.fc28
2.26-28.fc27
2.26-26.fc27
2.25-13.fc26
2.26-24.fc27
2.26-21.fc27
2.26-20.fc27
2.25-12.fc26
2.26-15.fc27
2.24-10.fc25
2.25-8.fc26
2.24-8.fc25
2.23.1-12.fc24
2.25-6.fc26
2.22-18.fc23
2.23.1-10.fc24
2.24-3.fc25
2.22-17.fc23
2.23.1-8.fc24
2.22-16.fc23
2.23.1-7.fc24
2.22-15.fc23
2.22-9.fc23
2.21-11.fc22
2.22-6.fc23
2.20-8.fc21
2.39-37.fc40
2.40-21.fc41
2.34-24.fc35
2.33-21.fc34
2.34-21.fc35
2.34-6.fc35
2.34-2.fc35
2.32-10.fc33
2.33-20.fc34
2.32-8.fc33
2.33.9000-18.fc35
2.33-16.fc34
2.32-7.fc33
2.32-6.fc33
2.33-5.fc34
2.31-5.fc32
2.32-3.fc33
2.40-10.fc41
2.38-19.fc39
2.37-19.fc38
2.38-18.fc39
2.38-16.fc39
2.37-18.fc38
2.37-10.fc38
2.36-14.fc37
2.38-6.fc39
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153170 - Buffer Under-read CVE-2026-5928 |
CWE-127 | Low | 2.42-12.fc43, 2.43-4.fc44 | 02.10.2026 |
SB2026100231 SB2026100235 SB2026100236 and 11 more |
||
| #VU153168 - Buffer over-read CVE-2026-6238 |
CWE-126 | Medium | 2.42-12.fc43, 2.43-4.fc44 | 02.10.2026 |
SB2026100230 SB2026100235 SB2026100236 and 10 more |
||
| #VU153119 - Out-of-bounds write CVE-2026-5435 |
CWE-787 | Medium | 2.42-12.fc43, 2.43-4.fc44 | 02.10.2026 |
SB2026100204 SB2026100205 SB2026100235 and 10 more |
||
| #VU153117 - Heap-based Buffer Overflow CVE-2026-5450 |
CWE-122 | High | 2.42-12.fc43, 2.43-4.fc44 | 02.10.2026 |
SB2026100203 SB2026100206 SB2026100207 and 19 more |
||
| #VU148984 - Reachable Assertion CVE-2026-4046 |
CWE-617 | Medium | 2.42-12.fc43, 2.43-4.fc44 | 11.09.2026 |
SB2026091126 SB2026091132 SB2026091133 and 13 more |
||
| #VU122300 - Use of Uninitialized Resource CVE-2025-15281 |
CWE-908 | Medium | 2.42-9.fc43 | 04.02.2026 |
SB2026020432 SB2026020433 SB2026020439 and 19 more |
||
| #VU122299 - Integer overflow CVE-2026-0861 |
CWE-190 | High | 2.42-9.fc43 | 04.02.2026 |
SB2026020432 SB2026020433 SB2026020434 and 20 more |
||
| #VU122298 - Use of Uninitialized Resource CVE-2026-0915 |
CWE-908 | Low | 2.42-9.fc43 | 04.02.2026 |
SB2026020432 SB2026020433 SB2026020434 and 19 more |
||
| #VU113187 - Double Free CVE-2025-8058 |
CWE-415 | High | 2.40-27.fc41, 2.41-9.fc42 | 24.07.2025 |
SB2025072408 SB2025072511 SB2025072512 and 59 more |
||
| #VU111873 - Resource Management Errors CVE-2025-5745 |
CWE-399 | Medium | 2.40-26.fc41, 2.41-7.fc42 | 24.06.2025 |
SB2025062437 SB2025062438 SB2025062439 and 1 more |
||
| #VU111872 - Resource Management Errors CVE-2025-5702 |
CWE-399 | Medium | 2.40-26.fc41, 2.41-7.fc42 | 24.06.2025 |
SB2025062437 SB2025062438 SB2025062439 and 11 more |
||
| #VU103687 - Memory corruption CVE-2025-0395 |
CWE-119 | Medium | 2.39-37.fc40, 2.40-21.fc41 | 06.02.2025 |
SB2025020664 SB2025020667 SB2025020668 and 66 more |
||
| #VU89712 - Stack-based buffer overflow CVE-2024-33599 |
CWE-121 | High | 2.38-19.fc39 | 21.05.2024 |
SB2024052147 SB2024052148 SB2024052305 and 84 more |
||
| #VU89711 - NULL Pointer Dereference CVE-2024-33600 |
CWE-476 | Medium | 2.38-19.fc39 | 21.05.2024 |
SB2024052147 SB2024052148 SB2024052305 and 83 more |
||
| #VU89710 - Allocation of Resources Without Limits or Throttling CVE-2024-33601 |
CWE-770 | Low | 2.38-19.fc39 | 21.05.2024 |
SB2024052147 SB2024052148 SB2024052305 and 82 more |
||
| #VU89709 - Memory corruption CVE-2024-33602 |
CWE-119 | Medium | 2.38-19.fc39 | 21.05.2024 |
SB2024052147 SB2024052148 SB2024052305 and 91 more |
||
| #VU88822 - Memory corruption CVE-2024-2961 |
CWE-119 | High | 2.37-19.fc38, 2.38-18.fc39 | 18.04.2024 |
SB2024041855 SB2024041856 SB2024041857 and 107 more |
||
| #VU85935 - Integer overflow CVE-2023-6780 |
CWE-190 | Low | 2.37-18.fc38, 2.38-16.fc39 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 6 more |
||
| #VU85934 - Off-by-one Error CVE-2023-6779 |
CWE-193 | Low | 2.37-18.fc38, 2.38-16.fc39 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 5 more |
||
| #VU85932 - Heap-based Buffer Overflow CVE-2023-6246 |
CWE-122 | Low | 2.37-18.fc38, 2.38-16.fc39 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 5 more |
Showing elements 1 - 20 out of 65