Known vulnerabilities in glibc-nss-devel

Vendor: OpenAnolis
Software: glibc-nss-devel
Software CPE: cpe:2.3:o:openanolis:glibc-nss-devel:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 29
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting glibc-nss-devel glibc-nss-devel is affected by 29 known vulnerabilities: 5 high, 14 medium, 10 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153170 - Buffer Under-read
CVE-2026-5928		 CWE-127 Low
No
No
 2.28-251.0.2, 2.38-23 02.10.2026 SB2026100231
SB2026100235
SB2026100236
and 10 more
#VU153168 - Buffer over-read
CVE-2026-6238		 CWE-126 Medium
No
No
 2.28-251.0.2, 2.38-24 02.10.2026 SB2026100230
SB2026100235
SB2026100236
and 9 more
#VU153119 - Out-of-bounds write
CVE-2026-5435		 CWE-787 Medium
No
No
 2.28-251.0.2, 2.38-25 02.10.2026 SB2026100204
SB2026100205
SB2026100235
and 9 more
#VU153117 - Heap-based Buffer Overflow
CVE-2026-5450		 CWE-122 High
No
No
 2.28-251.0.2, 2.38-23 02.10.2026 SB2026100203
SB2026100206
SB2026100207
and 19 more
#VU151513 - Reachable Assertion
CVE-2026-8674		 CWE-617 Medium
No
No
 2.38-32 21.09.2026 SB2026091570
SB2026100904
#VU150022 - Out-of-bounds write
CVE-2026-19499		 CWE-787 Medium
No
No
 2.38-31 15.09.2026 SB2026091570
SB2026091571
SB2026091572
and 1 more
#VU150023 - Out-of-bounds write
CVE-2026-19542		 CWE-787 Low
No
No
 2.38-30 15.09.2026 SB2026091570
SB2026091573
SB2026091574
and 1 more
#VU148984 - Reachable Assertion
CVE-2026-4046		 CWE-617 Medium
No
No
 2.28-251.0.2, 2.38-22 11.09.2026 SB2026091126
SB2026091132
SB2026091133
and 13 more
#VU124259 - Out-of-bounds read
CVE-2026-4437		 CWE-125 Medium
No
No
 2.38-20 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU124258 - Improper input validation
CVE-2026-4438		 CWE-20 Low
No
No
 2.38-20 23.03.2026 SB2026032376
SB2026040346
SB2026040347
and 4 more
#VU122300 - Use of Uninitialized Resource
CVE-2025-15281		 CWE-908 Medium
No
No
 2.28-251.0.2, 2.38-17 04.02.2026 SB2026020432
SB2026020433
SB2026020439
and 19 more
#VU122299 - Integer overflow
CVE-2026-0861		 CWE-190 High
No
No
 2.38-17 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 20 more
#VU122298 - Use of Uninitialized Resource
CVE-2026-0915		 CWE-908 Low
No
No
 2.28-251.0.2, 2.38-17 04.02.2026 SB2026020432
SB2026020433
SB2026020434
and 19 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 2.28-251.0.1, 2.38-12 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU109844 - Untrusted Search Path
CVE-2025-4802		 CWE-426 Low
No
No
 2.28-251.0.2, 2.38-8 27.05.2025 SB2025052725
SB2025052735
SB2025052910
and 36 more
#VU103687 - Memory corruption
CVE-2025-0395		 CWE-119 Medium
No
No
 2.28-251.0.2 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 2.28-251.0.1, 2.38-6, 2.38-13 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600		 CWE-476 Medium
No
No
 2.28-251.0.1, 2.38-6, 2.38-13 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 2.28-251.0.1 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 2.28-251.0.1, 2.38-3 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more


Showing elements 1 - 20 out of 29