Known vulnerabilities in GNU C Library (glibc) - page 2

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 149
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 149 known vulnerabilities: 29 high, 78 medium, 42 low Critical High Medium Low

Vulnerabilities (149)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89712 - Stack-based buffer overflow
CVE-2024-33599
CWE-121 High
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600
CWE-476 Medium
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601
CWE-770 Low
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602
CWE-119 Medium
No
No
- 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961
CWE-119 High
Available
Exploited
- 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU85935 - Integer overflow
CVE-2023-6780
CWE-190 Low
No
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 6 more
#VU85934 - Off-by-one Error
CVE-2023-6779
CWE-193 Low
No
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 5 more
#VU85932 - Heap-based Buffer Overflow
CVE-2023-6246
CWE-122 Low
Available
No
- 31.01.2024 SB2024013126
SB2024013135
SB2024013136
and 5 more
#VU85931 - Information Exposure Through Log Files
CVE-2022-39046
CWE-532 Low
No
No
- 31.01.2024 SB2022083140
SB2024013111
#VU81453 - Use After Free
CVE-2023-4813
CWE-416 Medium
No
No
2.36 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81448 - Missing release of memory after effective lifetime
CVE-2023-5156
CWE-401 Medium
No
No
- 03.10.2023 SB2023100364
SB2023120723
SB2024011035
and 11 more
#VU81447 - Use After Free
CVE-2023-4806
CWE-416 Medium
No
No
- 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911
CWE-119 Low
Available
Exploited
- 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527
CWE-125 Medium
No
No
- 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU110117 - Improper input validation
CVE-2013-4458
CWE-20 Medium
No
No
- 13.02.2023 SB2023021346
SB2015030802
SB2014102403
and 1 more
#VU110119 - Resource Management Errors
CVE-2011-1071
CWE-399 Medium
Available
No
2.12.2 13.02.2023 SB2023021353
#VU110123 - Improper input validation
CVE-2010-0296
CWE-20 Low
No
No
- 13.02.2023 SB2023021347
SB2010111502
#VU110113 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-2702
CWE-94 Medium
Available
No
2.13 13.02.2023 SB2023021354
#VU110112 - Improper input validation
CVE-2014-7817
CWE-20 Low
No
No
- 13.02.2023 SB2023021345
SB2016021706
SB2015022709
and 1 more
#VU72124 - Out-of-bounds write
CVE-2023-25139
CWE-787 High
No
No
- 11.02.2023 SB2023021102


Showing elements 21 - 40 out of 149