Known vulnerabilities in GNU C Library (glibc) - page 5

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 139
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 139 known vulnerabilities: 28 high, 71 medium, 40 low Critical High Medium Low

Vulnerabilities (139)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11787 - Use After Free
CVE-2017-12133
CWE-416 High
No
No
- 12.04.2018 SB2017090405
SB2022110720
SB2017050852
and 3 more
#VU11549 - Integer overflow
CVE-2018-6551
CWE-190 Low
No
No
- 05.04.2018 SB2018040501
SB2018022812
SB2018022022
and 5 more
#VU37574 - Missing release of memory after effective lifetime
CVE-2017-1000408
CWE-401 Medium
Available
No
- 01.02.2018 SB2018020134
SB2018011501
SB2018011221
and 1 more
#VU37575 - Memory corruption
CVE-2017-1000409
CWE-119 Low
Available
No
- 01.02.2018 SB2018020135
SB2018011501
SB2018011221
and 1 more
#VU37856 - Integer overflow
CVE-2017-17426
CWE-190 High
No
No
- 05.12.2017 SB2017120515
SB2017121317
#VU110127 - Improper input validation
CVE-2004-0968
CWE-20 Low
No
No
- 11.10.2017 SB2017101140
#VU110128 - Improper input validation
CVE-2004-1453
CWE-20 Low
No
No
- 11.10.2017 SB2017101141
SB2004081601
#VU110130 - Improper input validation
CVE-2003-0859
CWE-20 Low
No
No
- 11.10.2017 SB2017101142
#VU110132 - Improper input validation
CVE-2002-1265
CWE-20 Medium
No
No
- 10.10.2017 SB2017101080
#VU110135 - Improper input validation
CVE-2000-0959
CWE-20 Low
No
No
- 10.10.2017 SB2017101081
#VU110136 - Improper input validation
CVE-2000-0824
CWE-20 Low
Available
No
2.1.1.6 10.10.2017 SB2017101086
#VU110122 - Improper input validation
CVE-2010-0830
CWE-20 Medium
No
No
- 17.08.2017 SB2017081739
SB2010111502
#VU110124 - Improper input validation
CVE-2009-4881
CWE-20 Medium
No
No
2.10.1 17.08.2017 SB2017081743
SB2010111502
#VU110125 - Improper input validation
CVE-2009-4880
CWE-20 Medium
Available
No
- 17.08.2017 SB2017081740
SB2010111502
#VU110111 - Improper input validation
CVE-2012-6656
CWE-20 Medium
No
No
2.16 01.07.2017 SB2017070111
SB2015030802
#VU110118 - Improper input validation
CVE-2013-4788
CWE-20 Medium
Available
No
- 01.07.2017 SB2017070109
SB2015030802
SB2014102403
#VU7135 - Memory corruption
CVE-2017-1000366
CWE-119 Medium
Available
No
- 20.06.2017 SB2017062010
SB2017062101
SB2017063003
and 19 more
#VU6434 - Resource exhaustion
CVE-2017-8804
CWE-400 Medium
No
No
- 07.05.2017 SB2017050802
SB2018022812
SB2018022022
and 4 more
#VU110097 - Out-of-bounds read
CVE-2015-8984
CWE-125 Medium
No
No
2.22 22.03.2017 SB2017032217
#VU110098 - Heap-based Buffer Overflow
CVE-2015-8983
CWE-122 High
No
No
2.22 22.03.2017 SB2017032217
SB2022032145


Showing elements 81 - 100 out of 139