Known vulnerabilities in GNU C Library (glibc) - page 6

Vendor: GNU
Software CPE: cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Total vulnerabilities: 139
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GNU C Library (glibc) GNU C Library (glibc) is affected by 139 known vulnerabilities: 28 high, 71 medium, 40 low Critical High Medium Low

Vulnerabilities (139)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110093 - Buffer overflow
CVE-2015-20109
CWE-120 Medium
No
No
2.22 31.07.2023 SB2017032217
#VU110100 - Missing release of memory after effective lifetime
CVE-2016-5417
CWE-401 Medium
No
No
2.24 12.02.2023 SB2016060104
#VU110099 - Stack-based buffer overflow
CVE-2015-8982
CWE-121 High
No
No
2.21 29.06.2021 SB2016112820
SB2022032145
#VU54337 - Improper input validation
CVE-2016-10228
CWE-20 Low
No
No
2.32 23.06.2021 SB2017030207
SB2021062314
SB2021062315
and 21 more
#VU110094 - Unchecked Return Value
CVE-1999-0199
CWE-252 High
No
No
2.2 03.12.2020 SB2014082902
#VU110092 - Unchecked Return Value
CVE-1999-0199
CWE-252 High
No
No
2.2 06.10.2020 SB2014082902
#VU110109 - Memory corruption
CVE-2015-1472
CWE-119 Medium
No
No
2.21 13.06.2019 SB2016112820
SB2016021706
SB2015022709
and 1 more
#VU12269 - NULL Pointer Dereference
CVE-2015-5180
CWE-476 Low
No
No
- 27.04.2018 SB2016123103
SB2018051109
SB2018041055
and 7 more
#VU12268 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2014-9402
CWE-835 Low
No
No
- 27.04.2018 SB2014112002
SB2018051109
SB2018041055
and 3 more
#VU110095 - Memory corruption
CVE-2011-5320
CWE-119 Medium
No
No
2.15 08.11.2017 SB2016112821
#VU31436 - Data Handling
CVE-2015-8985
CWE-19 Medium
No
No
2.28 20.03.2017 SB2017032011
SB2019081555
SB2022113036
and 5 more
#VU110126 - Credentials Management
CVE-2010-0015
CWE-255 Medium
No
No
- 07.12.2016 SB2016120710
#VU110108 - Memory corruption
CVE-2015-1473
CWE-119 Medium
No
No
2.21 28.11.2016 SB2016112820
#VU110107 - Improper input validation
CVE-2013-7424
CWE-20 Medium
No
No
2.15 28.11.2016 SB2016112821
#VU110129 - Improper input validation
CVE-2004-1382
CWE-20 Low
No
No
- 18.10.2016 SB2016101854
#VU110134 - Improper input validation
CVE-2002-0684
CWE-20 Medium
No
No
- 18.10.2016 SB2016101855
#VU31454 - Stack-based buffer overflow
CVE-2016-1234
CWE-121 Medium
No
No
2.24 01.06.2016 SB2016060104
SB2017050823
#VU41035 - Memory corruption
CVE-2014-6040
CWE-119 Medium
No
No
- 05.12.2014 SB2014120517
SB2016021706
SB2014102403
#VU41360 - Improper input validation
CVE-2014-5119
CWE-20 Medium
No
No
2.2 29.08.2014 SB2014082902
SB2014091301
SB2014091203
and 5 more
#VU41440 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-0475
CWE-22 Medium
No
No
- 29.07.2014 SB2014072906
SB2014092505
SB2014092506
and 5 more


Showing elements 101 - 120 out of 139