Known vulnerabilities in GNU C Library (glibc) - page 2

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 139
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 139 known vulnerabilities: 28 high, 71 medium, 40 low Critical High Medium Low

Vulnerabilities (139)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85931 - Information Exposure Through Log Files
CVE-2022-39046
CWE-532 Low
No
No
- 31.01.2024 SB2022083140
SB2024013111
#VU81447 - Use After Free
CVE-2023-4806
CWE-416 Medium
No
No
- 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911
CWE-119 Low
Available
Exploited
- 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527
CWE-125 Medium
No
No
- 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU110117 - Improper input validation
CVE-2013-4458
CWE-20 Medium
No
No
- 13.02.2023 SB2023021346
SB2015030802
SB2014102403
and 1 more
#VU110119 - Resource Management Errors
CVE-2011-1071
CWE-399 Medium
Available
No
2.12.2 13.02.2023 SB2023021353
#VU110123 - Improper input validation
CVE-2010-0296
CWE-20 Low
No
No
- 13.02.2023 SB2023021347
SB2010111502
#VU110113 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-2702
CWE-94 Medium
Available
No
2.13 13.02.2023 SB2023021354
#VU110112 - Improper input validation
CVE-2014-7817
CWE-20 Low
No
No
- 13.02.2023 SB2023021345
SB2016021706
SB2015022709
and 1 more
#VU72124 - Out-of-bounds write
CVE-2023-25139
CWE-787 High
No
No
- 11.02.2023 SB2023021102
#VU61295 - Memory corruption
CVE-2022-23219
CWE-119 High
No
No
2.35, 2.35.9000 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 51 more
#VU61294 - Memory corruption
CVE-2022-23218
CWE-119 High
No
No
2.35, 2.35.9000 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 38 more
#VU61293 - Off-by-one Error
CVE-2021-3999
CWE-193 High
No
No
2.35, 2.35.9000 14.03.2022 SB2022031429
SB2022031430
SB2022031526
and 36 more
#VU61292 - Missing release of memory after effective lifetime
CVE-2021-3998
CWE-401 Medium
No
No
2.35, 2.35.9000 14.03.2022 SB2022031429
SB2022031430
SB2022030129
and 8 more
#VU110120 - Resource Management Errors
CVE-2010-4756
CWE-399 Low
No
No
- 01.09.2021 SB2021090141
#VU55972 - Integer overflow
CVE-2021-35942
CWE-190 Medium
No
No
2.34 18.08.2021 SB2021081817
SB2021081818
SB2021100416
and 32 more
#VU55916 - NULL Pointer Dereference
CVE-2021-38604
CWE-476 Medium
No
No
- 17.08.2021 SB2021081710
SB2022081401
SB2023061617
and 4 more
#VU54560 - Use After Free
CVE-2021-33574
CWE-416 High
No
No
- 06.07.2021 SB2021070603
SB2021070604
SB2021092807
and 22 more
#VU54559 - Double Free
CVE-2021-27645
CWE-415 Low
No
No
- 06.07.2021 SB2021022425
SB2021070604
SB2022031430
and 13 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618
CWE-835 Medium
No
No
- 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more


Showing elements 21 - 40 out of 139