Buffer overflow in GNU C Library (glibc) - CVE-2022-23218

Vulnerability identifier: #VU61294

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-23218

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the svcunix_create() in the sunrpc module ib glibc. A remote attacker can pass specially crafted input to the application that is using the affected library version, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GNU C Library (glibc)
Gentoo Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
Ubuntu
Fedora
SIMATIC S7-1500 TM MFP - BIOS
cflinuxfs3
RecoverPoint Classic
EMC ECS
Watson Studio on Cloud Pak for Data
CloudLink
Red Hat OpenShift GitOps
IBM Integrated Analytics System
Cloud Pak for Security (CP4S)
RecoverPoint for Virtual Machines
IBM Qradar SIEM
EMC ESRS Policy Manager
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
IBM MQ Operator
Netcool Operations Insight
IBM Cloud Transformation Advisor
IBM Cloud Pak System
Oracle Communications Cloud Native Core Unified Data Repository
Red Hat OpenShift Serverless
IBM Supplied MQ Advanced Queue Manager Container images
Migration Toolkit for Containers
glibc-devel-32bit
glibc-debuginfo-32bit
glibc-debugsource
glibc-debuginfo
glibc
glibc-devel
glibc-i18ndata
glibc-locale-32bit
glibc-32bit
nscd
glibc-profile
glibc-locale
glibc-info
glibc-html
glibc-profile-32bit
glibc-devel-debuginfo
glibc-devel-debuginfo-32bit
glibc-locale-debuginfo
glibc-locale-debuginfo-32bit
nscd-debuginfo
glibc-devel-static
glibc-32bit-debuginfo
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit
glibc-locale-base-32bit-debuginfo
glibc-utils-src-debugsource
glibc-utils-debuginfo
glibc-utils
glibc-locale-base-debuginfo
glibc-locale-base
glibc-extra-debuginfo
glibc-extra
libc6 (Ubuntu package)
glibc (Red Hat package)
glibc-langpack-ml
glibc-langpack-lo
glibc-langpack-lt
glibc-langpack-lv
glibc-langpack-lzh
glibc-langpack-mag
glibc-langpack-mai
glibc-langpack-mfe
glibc-langpack-mg
glibc-langpack-mhr
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-ln
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-ms
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nb
glibc-langpack-nds
glibc-langpack-ne
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-kl
glibc-langpack-hu
glibc-langpack-hy
glibc-langpack-ia
glibc-langpack-id
glibc-langpack-ig
glibc-langpack-ik
glibc-langpack-is
glibc-langpack-it
glibc-langpack-iu
glibc-langpack-ja
glibc-langpack-ka
glibc-langpack-kab
glibc-langpack-kk
glibc-langpack-nl
glibc-langpack-km
glibc-langpack-kn
glibc-langpack-ko
glibc-langpack-kok
glibc-langpack-ks
glibc-langpack-ku
glibc-langpack-kw
glibc-langpack-ky
glibc-langpack-lb
glibc-langpack-lg
glibc-langpack-li
glibc-langpack-lij
glibc-langpack-ta
glibc-langpack-si
glibc-langpack-sid
glibc-langpack-sk
glibc-langpack-sl
glibc-langpack-sm
glibc-langpack-so
glibc-langpack-sq
glibc-langpack-sr
glibc-langpack-ss
glibc-langpack-st
glibc-langpack-sv
glibc-langpack-sw
glibc-langpack-szl
glibc-langpack-shs
glibc-langpack-tcy
glibc-langpack-te
glibc-langpack-tg
glibc-langpack-th
glibc-langpack-the
glibc-langpack-ti
glibc-langpack-tig
glibc-langpack-tk
glibc-langpack-tl
glibc-langpack-tn
glibc-langpack-to
glibc-langpack-tpi
glibc-langpack-quz
glibc-langpack-nn
glibc-langpack-nr
glibc-langpack-nso
glibc-langpack-oc
glibc-langpack-om
glibc-langpack-or
glibc-langpack-os
glibc-langpack-pa
glibc-langpack-pap
glibc-langpack-pl
glibc-langpack-ps
glibc-langpack-pt
glibc-langpack-ht
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-ru
glibc-langpack-rw
glibc-langpack-sa
glibc-langpack-sah
glibc-langpack-sat
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-se
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-am
glibc-langpack-ts
glibc-langpack-tr
compat-libpthread-nonshared
glibc-all-langpacks
glibc-common
glibc-headers
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-tt
glibc-langpack-an
glibc-langpack-anp
glibc-langpack-ar
glibc-langpack-as
glibc-langpack-ast
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-bg
glibc-langpack-bhb
glibc-langpack-xh
nss_db
libnsl
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-hsb
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-gd
glibc-langpack-es
glibc-langpack-et
glibc-langpack-eu
glibc-langpack-fa
glibc-langpack-ff
glibc-langpack-fi
glibc-langpack-fil
glibc-langpack-fo
glibc-langpack-fr
glibc-langpack-fur
glibc-langpack-fy
glibc-langpack-ga
glibc-langpack-bi
glibc-langpack-gez
glibc-langpack-gl
glibc-langpack-gu
glibc-langpack-gv
glibc-langpack-ha
glibc-langpack-hak
glibc-langpack-he
glibc-langpack-hi
glibc-langpack-hif
glibc-langpack-hne
glibc-langpack-hr
glibc-langpack-en
glibc-langpack-bho
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-br
glibc-langpack-brx
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-csb
glibc-langpack-eo
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-dsb
glibc-langpack-doi
glibc-langpack-de
glibc-langpack-da
glibc-langpack-cy
glibc-langpack-cv
glibc-langpack-cs
glibc-lang
sys-libs/glibc
SIMATIC MV500

Install updates from vendor's website.

GNU C Library (glibc) - addressed in versions 2.35, 2.35.9000
cflinuxfs3 - update to 0.275.0
Red Hat OpenShift GitOps - addressed in versions 1.2.3, 1.3.6, 1.4.4
Cloud Pak for Security (CP4S) - update to 1.10.7.0
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.8, 2.4.3
IBM Cloud Pak System - update to 2.3.3.5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.0.8
Dell Secure Connect Gateway - update to 5.12.00.10
RecoverPoint Classic - update to 5.1 SP4 P4
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Qradar SIEM - addressed in versions 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2
Red Hat OpenShift Serverless - update to 1
IBM Integrated Analytics System - update to 1.0.30.0
IBM MQ Operator - addressed in versions 1.3.3, 1.8.0
Migration Toolkit for Containers - addressed in versions 1.5.4, 1.7.1
Netcool Operations Insight - update to 1.6.6
glibc-devel-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-debuginfo-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-debugsource - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-debuginfo - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-i18ndata - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
nscd - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-profile - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-info - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-html - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-profile-32bit - addressed in versions 2.11.3-17.110.40.1, 2.22-114.19.1, 2.22-119.1
glibc-devel-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-debuginfo-32bit - addressed in versions 2.22-114.19.1, 2.22-119.1
glibc-locale-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1
glibc-locale-debuginfo-32bit - addressed in versions 2.22-114.19.1, 2.22-119.1
nscd-debuginfo - addressed in versions 2.22-114.19.1, 2.22-119.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-static - addressed in versions 2.22-114.19.1, 2.26-13.65.1, 2.31-150300.9.12.1
glibc-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-devel-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-32bit - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils-src-debugsource - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-utils - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-locale-base - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-extra-debuginfo - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
glibc-extra - addressed in versions 2.26-13.65.1, 2.31-150300.9.12.1
libc6 (Ubuntu package) - addressed in versions 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2, 2.230ubuntu11.3+esm1
glibc (Red Hat package) - update to 2.28-164.el8_5.3
glibc-langpack-ml - update to 2.28-164.0.1
glibc-langpack-lo - update to 2.28-164.0.1
glibc-langpack-lt - update to 2.28-164.0.1
glibc-langpack-lv - update to 2.28-164.0.1
glibc-langpack-lzh - update to 2.28-164.0.1
glibc-langpack-mag - update to 2.28-164.0.1
glibc-langpack-mai - update to 2.28-164.0.1
glibc-langpack-mfe - update to 2.28-164.0.1
glibc-langpack-mg - update to 2.28-164.0.1
glibc-langpack-mhr - update to 2.28-164.0.1
glibc-langpack-mi - update to 2.28-164.0.1
glibc-langpack-miq - update to 2.28-164.0.1
glibc-langpack-mjw - update to 2.28-164.0.1
glibc-langpack-mk - update to 2.28-164.0.1
glibc-langpack-ln - update to 2.28-164.0.1
glibc-langpack-mn - update to 2.28-164.0.1
glibc-langpack-mni - update to 2.28-164.0.1
glibc-langpack-mr - update to 2.28-164.0.1
glibc-langpack-ms - update to 2.28-164.0.1
glibc-langpack-mt - update to 2.28-164.0.1
glibc-langpack-my - update to 2.28-164.0.1
glibc-langpack-nan - update to 2.28-164.0.1
glibc-langpack-nb - update to 2.28-164.0.1
glibc-langpack-nds - update to 2.28-164.0.1
glibc-langpack-ne - update to 2.28-164.0.1
glibc-langpack-nhn - update to 2.28-164.0.1
glibc-langpack-niu - update to 2.28-164.0.1
glibc-langpack-kl - update to 2.28-164.0.1
glibc-langpack-hu - update to 2.28-164.0.1
glibc-langpack-hy - update to 2.28-164.0.1
glibc-langpack-ia - update to 2.28-164.0.1
glibc-langpack-id - update to 2.28-164.0.1
glibc-langpack-ig - update to 2.28-164.0.1
glibc-langpack-ik - update to 2.28-164.0.1
glibc-langpack-is - update to 2.28-164.0.1
glibc-langpack-it - update to 2.28-164.0.1
glibc-langpack-iu - update to 2.28-164.0.1
glibc-langpack-ja - update to 2.28-164.0.1
glibc-langpack-ka - update to 2.28-164.0.1
glibc-langpack-kab - update to 2.28-164.0.1
glibc-langpack-kk - update to 2.28-164.0.1
glibc-langpack-nl - update to 2.28-164.0.1
glibc-langpack-km - update to 2.28-164.0.1
glibc-langpack-kn - update to 2.28-164.0.1
glibc-langpack-ko - update to 2.28-164.0.1
glibc-langpack-kok - update to 2.28-164.0.1
glibc-langpack-ks - update to 2.28-164.0.1
glibc-langpack-ku - update to 2.28-164.0.1
glibc-langpack-kw - update to 2.28-164.0.1
glibc-langpack-ky - update to 2.28-164.0.1
glibc-langpack-lb - update to 2.28-164.0.1
glibc-langpack-lg - update to 2.28-164.0.1
glibc-langpack-li - update to 2.28-164.0.1
glibc-langpack-lij - update to 2.28-164.0.1
glibc-langpack-ta - update to 2.28-164.0.1
glibc-langpack-si - update to 2.28-164.0.1
glibc-langpack-sid - update to 2.28-164.0.1
glibc-langpack-sk - update to 2.28-164.0.1
glibc-langpack-sl - update to 2.28-164.0.1
glibc-langpack-sm - update to 2.28-164.0.1
glibc-langpack-so - update to 2.28-164.0.1
glibc-langpack-sq - update to 2.28-164.0.1
glibc-langpack-sr - update to 2.28-164.0.1
glibc-langpack-ss - update to 2.28-164.0.1
glibc-langpack-st - update to 2.28-164.0.1
glibc-langpack-sv - update to 2.28-164.0.1
glibc-langpack-sw - update to 2.28-164.0.1
glibc-langpack-szl - update to 2.28-164.0.1
glibc-langpack-shs - update to 2.28-164.0.1
glibc-langpack-tcy - update to 2.28-164.0.1
glibc-langpack-te - update to 2.28-164.0.1
glibc-langpack-tg - update to 2.28-164.0.1
glibc-langpack-th - update to 2.28-164.0.1
glibc-langpack-the - update to 2.28-164.0.1
glibc-langpack-ti - update to 2.28-164.0.1
glibc-langpack-tig - update to 2.28-164.0.1
glibc-langpack-tk - update to 2.28-164.0.1
glibc-langpack-tl - update to 2.28-164.0.1
glibc-langpack-tn - update to 2.28-164.0.1
glibc-langpack-to - update to 2.28-164.0.1
glibc-langpack-tpi - update to 2.28-164.0.1
glibc-langpack-quz - update to 2.28-164.0.1
glibc-langpack-nn - update to 2.28-164.0.1
glibc-langpack-nr - update to 2.28-164.0.1
glibc-langpack-nso - update to 2.28-164.0.1
glibc-langpack-oc - update to 2.28-164.0.1
glibc-langpack-om - update to 2.28-164.0.1
glibc-langpack-or - update to 2.28-164.0.1
glibc-langpack-os - update to 2.28-164.0.1
glibc-langpack-pa - update to 2.28-164.0.1
glibc-langpack-pap - update to 2.28-164.0.1
glibc-langpack-pl - update to 2.28-164.0.1
glibc-langpack-ps - update to 2.28-164.0.1
glibc-langpack-pt - update to 2.28-164.0.1
glibc-langpack-ht - update to 2.28-164.0.1
glibc-langpack-raj - update to 2.28-164.0.1
glibc-langpack-ro - update to 2.28-164.0.1
glibc-langpack-ru - update to 2.28-164.0.1
glibc-langpack-rw - update to 2.28-164.0.1
glibc-langpack-sa - update to 2.28-164.0.1
glibc-langpack-sah - update to 2.28-164.0.1
glibc-langpack-sat - update to 2.28-164.0.1
glibc-langpack-sc - update to 2.28-164.0.1
glibc-langpack-sd - update to 2.28-164.0.1
glibc-langpack-se - update to 2.28-164.0.1
glibc-langpack-sgs - update to 2.28-164.0.1
glibc-langpack-shn - update to 2.28-164.0.1
glibc-langpack-am - update to 2.28-164.0.1
glibc-langpack-ts - update to 2.28-164.0.1
glibc-langpack-tr - update to 2.28-164.0.1
compat-libpthread-nonshared - update to 2.28-164.0.1
glibc - update to 2.28-164.0.1
glibc-all-langpacks - update to 2.28-164.0.1
glibc-common - update to 2.28-164.0.1
glibc-devel - update to 2.28-164.0.1
glibc-headers - update to 2.28-164.0.1
glibc-langpack-aa - update to 2.28-164.0.1
glibc-langpack-af - update to 2.28-164.0.1
glibc-langpack-agr - update to 2.28-164.0.1
glibc-langpack-ak - update to 2.28-164.0.1
glibc-langpack-tt - update to 2.28-164.0.1
glibc-langpack-an - update to 2.28-164.0.1
glibc-langpack-anp - update to 2.28-164.0.1
glibc-langpack-ar - update to 2.28-164.0.1
glibc-langpack-as - update to 2.28-164.0.1
glibc-langpack-ast - update to 2.28-164.0.1
glibc-langpack-ayc - update to 2.28-164.0.1
glibc-langpack-az - update to 2.28-164.0.1
glibc-langpack-be - update to 2.28-164.0.1
glibc-langpack-bem - update to 2.28-164.0.1
glibc-langpack-ber - update to 2.28-164.0.1
glibc-langpack-bg - update to 2.28-164.0.1
glibc-langpack-bhb - update to 2.28-164.0.1
glibc-langpack-xh - update to 2.28-164.0.1
nss_db - update to 2.28-164.0.1
nscd - update to 2.28-164.0.1
libnsl - update to 2.28-164.0.1
glibc-utils - update to 2.28-164.0.1
glibc-minimal-langpack - update to 2.28-164.0.1
glibc-locale-source - update to 2.28-164.0.1
glibc-langpack-zu - update to 2.28-164.0.1
glibc-langpack-zh - update to 2.28-164.0.1
glibc-langpack-yuw - update to 2.28-164.0.1
glibc-langpack-yue - update to 2.28-164.0.1
glibc-langpack-yo - update to 2.28-164.0.1
glibc-langpack-yi - update to 2.28-164.0.1
glibc-langpack-hsb - update to 2.28-164.0.1
glibc-langpack-wo - update to 2.28-164.0.1
glibc-langpack-wal - update to 2.28-164.0.1
glibc-langpack-wae - update to 2.28-164.0.1
glibc-langpack-wa - update to 2.28-164.0.1
glibc-langpack-vi - update to 2.28-164.0.1
glibc-langpack-ve - update to 2.28-164.0.1
glibc-langpack-uz - update to 2.28-164.0.1
glibc-langpack-ur - update to 2.28-164.0.1
glibc-langpack-unm - update to 2.28-164.0.1
glibc-langpack-uk - update to 2.28-164.0.1
glibc-langpack-ug - update to 2.28-164.0.1
glibc-langpack-gd - update to 2.28-164.0.1
glibc-langpack-es - update to 2.28-164.0.1
glibc-langpack-et - update to 2.28-164.0.1
glibc-langpack-eu - update to 2.28-164.0.1
glibc-langpack-fa - update to 2.28-164.0.1
glibc-langpack-ff - update to 2.28-164.0.1
glibc-langpack-fi - update to 2.28-164.0.1
glibc-langpack-fil - update to 2.28-164.0.1
glibc-langpack-fo - update to 2.28-164.0.1
glibc-langpack-fr - update to 2.28-164.0.1
glibc-langpack-fur - update to 2.28-164.0.1
glibc-langpack-fy - update to 2.28-164.0.1
glibc-langpack-ga - update to 2.28-164.0.1
glibc-langpack-bi - update to 2.28-164.0.1
glibc-langpack-gez - update to 2.28-164.0.1
glibc-langpack-gl - update to 2.28-164.0.1
glibc-langpack-gu - update to 2.28-164.0.1
glibc-langpack-gv - update to 2.28-164.0.1
glibc-langpack-ha - update to 2.28-164.0.1
glibc-langpack-hak - update to 2.28-164.0.1
glibc-langpack-he - update to 2.28-164.0.1
glibc-langpack-hi - update to 2.28-164.0.1
glibc-langpack-hif - update to 2.28-164.0.1
glibc-langpack-hne - update to 2.28-164.0.1
glibc-langpack-hr - update to 2.28-164.0.1
glibc-langpack-en - update to 2.28-164.0.1
glibc-langpack-bho - update to 2.28-164.0.1
glibc-langpack-bn - update to 2.28-164.0.1
glibc-langpack-bo - update to 2.28-164.0.1
glibc-langpack-br - update to 2.28-164.0.1
glibc-langpack-brx - update to 2.28-164.0.1
glibc-langpack-bs - update to 2.28-164.0.1
glibc-langpack-byn - update to 2.28-164.0.1
glibc-langpack-ca - update to 2.28-164.0.1
glibc-langpack-ce - update to 2.28-164.0.1
glibc-langpack-chr - update to 2.28-164.0.1
glibc-langpack-cmn - update to 2.28-164.0.1
glibc-langpack-crh - update to 2.28-164.0.1
glibc-langpack-csb - update to 2.28-164.0.1
glibc-langpack-eo - update to 2.28-164.0.1
glibc-langpack-el - update to 2.28-164.0.1
glibc-langpack-dz - update to 2.28-164.0.1
glibc-langpack-dv - update to 2.28-164.0.1
glibc-langpack-dsb - update to 2.28-164.0.1
glibc-langpack-doi - update to 2.28-164.0.1
glibc-langpack-de - update to 2.28-164.0.1
glibc-langpack-da - update to 2.28-164.0.1
glibc-langpack-cy - update to 2.28-164.0.1
glibc-langpack-cv - update to 2.28-164.0.1
glibc-langpack-cs - update to 2.28-164.0.1
glibc-lang - update to 2.31-150300.9.12.1
glibc - addressed in versions 2.33-21.fc34, 2.34-21.fc35
sys-libs/glibc - update to 2.34
SIMATIC MV500 - update to 3.3.5
EMC ECS - update to 3.7.0.2
IBM Cloud Transformation Advisor - update to 3.10.0
Watson Studio on Cloud Pak for Data - addressed in versions 4.8.7, 5.1.0
EMC ESRS Policy Manager - update to 5.10.00.00
CloudLink - update to 7.1.4
IBM Supplied MQ Advanced Queue Manager Container images - addressed in versions 9.2.0.5-r1-eus, 9.2.5.0-r1

• https://sourceware.org/bugzilla/show_bug.cgi?id=28768

• Multiple vulnerabilities in GNU C Library
• Multiple vulnerabilities in Cloud Foundry cflinuxfs3
• Red Hat Enterprise Linux 8 update for glibc
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.2
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.3
• Amazon Linux AMI update for glibc
• Ubuntu update for glibc
• Ubuntu update for glibc
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Multiple vulnerabilities in Dell CloudLink
• Gentoo update for GNU C Library
• Multiple vulnerabilities in IBM Cloud Pak System third-party components
• Multiple vulnerabilities in Dell Elastic Cloud Storage (ECS)
• Multiple vulnerabilities in Dell EMC Policy Manager
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Netcool Operations Insight
• Buffer overflow in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• SUSE update for glibc
• SUSE update for glibc
• SUSE update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in Dell RecoverPoint Classic
• Multiple vulnerabilities in Siemens SIMATIC S7-1500 TM MFP - BIOS
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Siemens SIMATIC MV500
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• IBM Integrated Analytics System update for glibc
• Multiple vulnerabilities in Migration Toolkit for Containers 1.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.4
• Multiple vulnerabilities in Migration Toolkit for Containers 1.7
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Fedora 35 update for glibc
• Fedora 34 update for glibc
• Multiple vulnerabilities in IBM MQ Operator and IBM supplied MQ Advanced container images
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data
• Anolis OS update for glibc
• Dell RecoverPoint for Virtual Machines update for third-party components
• SUSE update for glibc