Stack-based buffer overflow in GNU C Library (glibc) - CVE-2024-33599

Vulnerability identifier: #VU89712

CSH Severity: High

CVSS v4 BT: 7.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-33599

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in nscd binary. A remote unauthenticated attacker can exhaust the nscd fixed size cache to trigger a stack-based buffer overflow and execute arbitrary code on the target system.

GNU C Library (glibc)
PowerStore 9000X
PowerStore 7000X
PowerStore 5000X
PowerStore 3000X
PowerStore 1000X
SmartFabric Storage Software
PowerStoreX OS
Debian Linux
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
Ubuntu
openEuler
Fedora
Voice Gateway
Guardium Data Security Center (GDSC)
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
PowerStore T
IBM OS Image for Red Hat Linux Systems
Storage Resource Manager
watsonx Assistant Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
IBM supplied MQ Advanced container images
EMC Cloud Tiering Appliance
IBM Edge Application Manager
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
nscd (Ubuntu package)
glibc-headers
glibc-static
glibc-devel
glibc-common
glibc
nscd
glibc-utils
glibc (Red Hat package)
glibc-debuginfo
glibc-debugsource
glibc-devel-debuginfo
glibc-32bit
glibc-locale-32bit
glibc-debuginfo-32bit
glibc-devel-debuginfo-32bit
glibc-profile-32bit
glibc-devel-32bit
glibc-locale-debuginfo-32bit
glibc-html
glibc-i18ndata
glibc-locale
nscd-debuginfo
glibc-profile
glibc-locale-debuginfo
glibc-info
glibc-devel-static
glibc-locale-base-debuginfo
glibc-locale-base
glibc-utils-debuginfo
glibc-utils-src-debugsource
glibc-extra-debuginfo
glibc-utils-src
glibc-32bit-debuginfo
glibc-locale-base-32bit
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-extra
glibc-all-langpacks
glibc-nss-devel
glibc-benchtests
glibc-debugutils
libnsl
glibc-locale-source
nss_modules
glibc-compat-2.17
glibc-help
glibc-langpack-lzh
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-mjw
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-nb
glibc-langpack-nso
nss_db
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
nss_hesiod
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-ku
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-mn
glibc-langpack-ml
glibc-langpack-mk
glibc-langpack-hak
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-ia
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-kab
glibc-langpack-or
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-doc
glibc-langpack-kk
glibc-langpack-kw
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-sv
glibc-langpack-ve
glibc-langpack-vi
glibc-langpack-wa
glibc-langpack-bs
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-wae
glibc-langpack-wal
glibc-langpack-uz
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-wo
glibc-langpack-xh
glibc-langpack-sm
glibc-langpack-yi
glibc-langpack-to
glibc-langpack-te
glibc-langpack-tg
glibc-langpack-th
glibc-langpack-the
glibc-langpack-ti
glibc-langpack-tig
glibc-langpack-tk
glibc-langpack-tl
glibc-langpack-tn
glibc-langpack-yo
glibc-langpack-tpi
glibc-langpack-tr
glibc-langpack-ts
glibc-langpack-tt
glibc-langpack-ug
glibc-langpack-uk
glibc-langpack-unm
glibc-langpack-ur
glibc-langpack-quz
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-sah
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-tcy
glibc-langpack-om
glibc-langpack-si
glibc-langpack-yue
glibc-langpack-yuw
glibc-langpack-sl
glibc-langpack-zh
glibc-langpack-zu
glibc-langpack-sk
glibc-minimal-langpack
glibc-langpack-sid
glibc-langpack-oc
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-an
glibc-langpack-bo
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-fr
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-gconv-extra
compat-libpthread-nonshared
glibc-langpack-fur
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-cs
glibc (Debian package)
glibc-i18n
aaa_glibc-solibs
glibc-locale-archive
sys-libs/glibc
IBM Security Verify Governance
Migration Toolkit for Runtimes
Service Interconnect
IBM MQ Operator
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift distributed tracing (RHOSDT)
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
Session Smart Router
IBM Workload Scheduler
Red Hat build of Keycloak
Juniper Junos Space
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Red Hat OpenShift GitOps
IBM Integrated Analytics System
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
IBM Cloud Pak System
Dell EMC Storage Monitoring and Reporting (SMR)
Red Hat Ceph Storage
IBM Storage Scale System
Red Hat Single Sign-On
Dell EMC VxRail Appliance
IBM Security Guardium

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Voice Gateway - update to 1.0.8.12
SmartFabric Storage Software - update to 1.4.3
Guardium Data Security Center (GDSC) - update to 3.7.2
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
IBM Business Automation Manager Open Editions - update to 9.1.1
IBM Security Verify Governance - update to 10.0.2.0.5
Juniper Junos Space - update to 24.1R3
nscd (Ubuntu package) - addressed in versions Ubuntu Pro, 2.31-0ubuntu9.16, 2.35-0ubuntu3.8, 2.38-1ubuntu6.3, 2.39-0ubuntu8.2
Migration Toolkit for Runtimes - update to 1.2.6
OpenShift API for Data Protection (OADP) - update to 1.3.2
Service Interconnect - addressed in versions 1.4.5, 1.5.4
Network Observability plugin for the Openshift Console - update to 1.6.0
Migration Toolkit for Containers - update to 1.8.4
Red Hat OpenShift GitOps - addressed in versions 1.11.6, 1.12.4, 1.12.5, 1.13.1
Red Hat OpenShift Serverless - update to 1.33.0
IBM MQ Operator - addressed in versions 2.0.22, 3.1.3
IBM Cloud Pak System - update to 2.3.4.1
Ansible Automation Platform - update to 2.4
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.7, 2.10.4
glibc-headers - addressed in versions 2.17-326, 2.28-251.0.1
glibc-static - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc-devel - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc-common - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
nscd - addressed in versions 2.17-326, 2.28-251.0.1
glibc-utils - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-6, 2.38-13
glibc (Red Hat package) - addressed in versions 2.17-326.el7_9.3, 2.28-101.el8_2.2, 2.28-151.el8_4.2, 2.28-189.10.el8_6, 2.28-225.el8_8.11, 2.28-251.el8_10.2, 2.34-28.el9_0.6, 2.34-60.el9_2.14, 2.34-100.el9_4.2
glibc-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-debugsource - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-devel-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-32bit - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-32bit - update to 2.22-114.34.1
glibc-debuginfo-32bit - update to 2.22-114.34.1
glibc-devel-debuginfo-32bit - update to 2.22-114.34.1
glibc-profile-32bit - update to 2.22-114.34.1
glibc-devel-32bit - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-debuginfo-32bit - update to 2.22-114.34.1
glibc-html - update to 2.22-114.34.1
glibc-i18ndata - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
nscd - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
nscd-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-profile - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-debuginfo - update to 2.22-114.34.1
glibc-devel - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-info - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-devel-static - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-utils - update to 2.26-150000.13.73.1
glibc-locale-base-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base - update to 2.26-150000.13.73.1
glibc-utils-debuginfo - update to 2.26-150000.13.73.1
glibc-utils-src-debugsource - update to 2.26-150000.13.73.1
glibc-extra-debuginfo - update to 2.26-150000.13.73.1
glibc-utils-src - update to 2.26-150000.13.73.1
glibc-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-32bit - update to 2.26-150000.13.73.1
glibc-devel-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-extra - update to 2.26-150000.13.73.1
glibc-common - addressed in versions 2.28-101, 2.34-150
glibc - addressed in versions 2.28-101, 2.34-150
glibc-all-langpacks - addressed in versions 2.28-101, 2.34-150
glibc-nss-devel - addressed in versions 2.28-101, 2.34-150
glibc-debugsource - addressed in versions 2.28-101, 2.34-150
glibc-benchtests - update to 2.28-101
glibc-debugutils - addressed in versions 2.28-101, 2.34-150
glibc-devel - addressed in versions 2.28-101, 2.34-150
libnsl - addressed in versions 2.28-101, 2.34-150
glibc-debuginfo - addressed in versions 2.28-101, 2.34-150
glibc-locale-source - addressed in versions 2.28-101, 2.34-150
nscd - addressed in versions 2.28-101, 2.34-150
nss_modules - addressed in versions 2.28-101, 2.34-150
glibc-compat-2.17 - addressed in versions 2.28-101, 2.34-150
glibc-help - addressed in versions 2.28-101, 2.34-150
glibc-langpack-lzh - update to 2.28-251.0.1
glibc-langpack-miq - update to 2.28-251.0.1
glibc-langpack-mi - update to 2.28-251.0.1
glibc-langpack-mhr - update to 2.28-251.0.1
glibc-langpack-mg - update to 2.28-251.0.1
glibc-langpack-mfe - update to 2.28-251.0.1
glibc-langpack-mai - update to 2.28-251.0.1
glibc-langpack-mag - update to 2.28-251.0.1
glibc-langpack-mjw - update to 2.28-251.0.1
glibc-langpack-lv - update to 2.28-251.0.1
glibc-langpack-lt - update to 2.28-251.0.1
glibc-langpack-lo - update to 2.28-251.0.1
glibc-langpack-ln - update to 2.28-251.0.1
glibc-langpack-lij - update to 2.28-251.0.1
glibc-langpack-li - update to 2.28-251.0.1
glibc-langpack-lg - update to 2.28-251.0.1
glibc-langpack-lb - update to 2.28-251.0.1
glibc-langpack-ky - update to 2.28-251.0.1
glibc-langpack-nb - update to 2.28-251.0.1
glibc-langpack-nso - update to 2.28-251.0.1
nss_db - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-nr - update to 2.28-251.0.1
glibc-langpack-nn - update to 2.28-251.0.1
glibc-langpack-nl - update to 2.28-251.0.1
nss_hesiod - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-niu - update to 2.28-251.0.1
glibc-langpack-nhn - update to 2.28-251.0.1
glibc-langpack-ne - update to 2.28-251.0.1
glibc-langpack-nds - update to 2.28-251.0.1
glibc-langpack-ku - update to 2.28-251.0.1
glibc-langpack-nan - update to 2.28-251.0.1
glibc-langpack-my - update to 2.28-251.0.1
glibc-langpack-mt - update to 2.28-251.0.1
glibc-langpack-ms - update to 2.28-251.0.1
glibc-langpack-mr - update to 2.28-251.0.1
glibc-langpack-mni - update to 2.28-251.0.1
glibc-langpack-mn - update to 2.28-251.0.1
glibc-langpack-ml - update to 2.28-251.0.1
glibc-langpack-mk - update to 2.28-251.0.1
glibc-langpack-hak - update to 2.28-251.0.1
glibc-langpack-hy - update to 2.28-251.0.1
glibc-langpack-hu - update to 2.28-251.0.1
glibc-langpack-ht - update to 2.28-251.0.1
glibc-langpack-hsb - update to 2.28-251.0.1
glibc-langpack-hr - update to 2.28-251.0.1
glibc-langpack-hne - update to 2.28-251.0.1
glibc-langpack-hif - update to 2.28-251.0.1
glibc-langpack-hi - update to 2.28-251.0.1
glibc-langpack-he - update to 2.28-251.0.1
glibc-langpack-ia - update to 2.28-251.0.1
glibc-langpack-ha - update to 2.28-251.0.1
glibc-langpack-gv - update to 2.28-251.0.1
glibc-langpack-gu - update to 2.28-251.0.1
glibc-langpack-gl - update to 2.28-251.0.1
glibc-langpack-gez - update to 2.28-251.0.1
glibc-langpack-gd - update to 2.28-251.0.1
glibc-langpack-ga - update to 2.28-251.0.1
glibc-langpack-fy - update to 2.28-251.0.1
glibc-langpack-kab - update to 2.28-251.0.1
glibc-langpack-or - update to 2.28-251.0.1
glibc-langpack-ks - update to 2.28-251.0.1
glibc-langpack-kok - update to 2.28-251.0.1
glibc-langpack-ko - update to 2.28-251.0.1
glibc-langpack-kn - update to 2.28-251.0.1
glibc-langpack-km - update to 2.28-251.0.1
glibc-langpack-kl - update to 2.28-251.0.1
glibc-doc - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-kk - update to 2.28-251.0.1
glibc-langpack-kw - update to 2.28-251.0.1
glibc-langpack-ka - update to 2.28-251.0.1
glibc-langpack-ja - update to 2.28-251.0.1
glibc-langpack-iu - update to 2.28-251.0.1
glibc-langpack-it - update to 2.28-251.0.1
glibc-langpack-is - update to 2.28-251.0.1
glibc-langpack-ik - update to 2.28-251.0.1
glibc-langpack-ig - update to 2.28-251.0.1
glibc-langpack-id - update to 2.28-251.0.1
glibc-langpack-sv - update to 2.28-251.0.1
glibc-langpack-ve - update to 2.28-251.0.1
glibc-langpack-vi - update to 2.28-251.0.1
glibc-langpack-wa - update to 2.28-251.0.1
glibc-langpack-bs - update to 2.28-251.0.1
glibc-langpack-ta - update to 2.28-251.0.1
glibc-langpack-szl - update to 2.28-251.0.1
glibc-langpack-sw - update to 2.28-251.0.1
glibc-langpack-wae - update to 2.28-251.0.1
glibc-langpack-wal - update to 2.28-251.0.1
glibc-langpack-uz - update to 2.28-251.0.1
glibc-langpack-st - update to 2.28-251.0.1
glibc-langpack-ss - update to 2.28-251.0.1
glibc-langpack-sr - update to 2.28-251.0.1
glibc-langpack-sq - update to 2.28-251.0.1
glibc-langpack-so - update to 2.28-251.0.1
glibc-langpack-wo - update to 2.28-251.0.1
glibc-langpack-xh - update to 2.28-251.0.1
glibc-langpack-sm - update to 2.28-251.0.1
glibc-langpack-yi - update to 2.28-251.0.1
glibc-langpack-to - update to 2.28-251.0.1
glibc-langpack-te - update to 2.28-251.0.1
glibc-langpack-tg - update to 2.28-251.0.1
glibc-langpack-th - update to 2.28-251.0.1
glibc-langpack-the - update to 2.28-251.0.1
glibc-langpack-ti - update to 2.28-251.0.1
glibc-langpack-tig - update to 2.28-251.0.1
glibc-langpack-tk - update to 2.28-251.0.1
glibc-langpack-tl - update to 2.28-251.0.1
glibc-langpack-tn - update to 2.28-251.0.1
glibc-langpack-yo - update to 2.28-251.0.1
glibc-langpack-tpi - update to 2.28-251.0.1
glibc-langpack-tr - update to 2.28-251.0.1
glibc-langpack-ts - update to 2.28-251.0.1
glibc-langpack-tt - update to 2.28-251.0.1
glibc-langpack-ug - update to 2.28-251.0.1
glibc-langpack-uk - update to 2.28-251.0.1
glibc-langpack-unm - update to 2.28-251.0.1
glibc-langpack-ur - update to 2.28-251.0.1
glibc-langpack-quz - update to 2.28-251.0.1
glibc-langpack-sa - update to 2.28-251.0.1
glibc-langpack-rw - update to 2.28-251.0.1
glibc-langpack-ru - update to 2.28-251.0.1
glibc-langpack-ro - update to 2.28-251.0.1
libnsl - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-raj - update to 2.28-251.0.1
glibc-langpack-sah - update to 2.28-251.0.1
glibc-langpack-pt - update to 2.28-251.0.1
glibc-langpack-ps - update to 2.28-251.0.1
glibc-langpack-pl - update to 2.28-251.0.1
glibc-langpack-pap - update to 2.28-251.0.1
glibc-langpack-pa - update to 2.28-251.0.1
glibc-langpack-os - update to 2.28-251.0.1
glibc-langpack-tcy - update to 2.28-251.0.1
glibc-langpack-om - update to 2.28-251.0.1
glibc-langpack-si - update to 2.28-251.0.1
glibc-langpack-yue - update to 2.28-251.0.1
glibc-langpack-yuw - update to 2.28-251.0.1
glibc-langpack-sl - update to 2.28-251.0.1
glibc-langpack-zh - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-zu - update to 2.28-251.0.1
glibc-langpack-sk - update to 2.28-251.0.1
glibc-locale-source - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-minimal-langpack - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-sid - update to 2.28-251.0.1
glibc-langpack-oc - update to 2.28-251.0.1
glibc-langpack-shs - update to 2.28-251.0.1
glibc-langpack-shn - update to 2.28-251.0.1
glibc-langpack-sgs - update to 2.28-251.0.1
glibc-nss-devel - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-se - update to 2.28-251.0.1
glibc-langpack-sd - update to 2.28-251.0.1
glibc-langpack-sc - update to 2.28-251.0.1
glibc-langpack-sat - update to 2.28-251.0.1
glibc-langpack-an - update to 2.28-251.0.1
glibc-langpack-bo - update to 2.28-251.0.1
glibc-langpack-bn - update to 2.28-251.0.1
glibc-langpack-bi - update to 2.28-251.0.1
glibc-langpack-bho - update to 2.28-251.0.1
glibc-langpack-bhb - update to 2.28-251.0.1
glibc-langpack-bg - update to 2.28-251.0.1
glibc-langpack-ber - update to 2.28-251.0.1
glibc-langpack-bem - update to 2.28-251.0.1
glibc-langpack-be - update to 2.28-251.0.1
glibc-langpack-az - update to 2.28-251.0.1
glibc-langpack-ayc - update to 2.28-251.0.1
glibc-langpack-ast - update to 2.28-251.0.1
glibc-langpack-as - update to 2.28-251.0.1
glibc-langpack-ar - update to 2.28-251.0.1
glibc-langpack-anp - update to 2.28-251.0.1
glibc-langpack-fr - update to 2.28-251.0.1
glibc-langpack-am - update to 2.28-251.0.1
glibc-langpack-ak - update to 2.28-251.0.1
glibc-langpack-agr - update to 2.28-251.0.1
glibc-langpack-af - update to 2.28-251.0.1
glibc-langpack-aa - update to 2.28-251.0.1
glibc-gconv-extra - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-benchtests - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-all-langpacks - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
compat-libpthread-nonshared - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-fur - update to 2.28-251.0.1
glibc-langpack-brx - update to 2.28-251.0.1
glibc-langpack-br - update to 2.28-251.0.1
glibc-langpack-fo - update to 2.28-251.0.1
glibc-langpack-fil - update to 2.28-251.0.1
glibc-langpack-fi - update to 2.28-251.0.1
glibc-langpack-ff - update to 2.28-251.0.1
glibc-langpack-fa - update to 2.28-251.0.1
glibc-langpack-eu - update to 2.28-251.0.1
glibc-langpack-et - update to 2.28-251.0.1
glibc-langpack-es - update to 2.28-251.0.1
glibc-langpack-eo - update to 2.28-251.0.1
glibc-langpack-en - addressed in versions 2.28-251.0.1, 2.38-6, 2.38-13
glibc-langpack-el - update to 2.28-251.0.1
glibc-langpack-dz - update to 2.28-251.0.1
glibc-langpack-dv - update to 2.28-251.0.1
glibc-langpack-doi - update to 2.28-251.0.1
glibc-langpack-dsb - update to 2.28-251.0.1
glibc-langpack-byn - update to 2.28-251.0.1
glibc-langpack-ca - update to 2.28-251.0.1
glibc-langpack-ce - update to 2.28-251.0.1
glibc-langpack-chr - update to 2.28-251.0.1
glibc-langpack-cmn - update to 2.28-251.0.1
glibc-langpack-crh - update to 2.28-251.0.1
glibc-langpack-csb - update to 2.28-251.0.1
glibc-langpack-cv - update to 2.28-251.0.1
glibc-langpack-cy - update to 2.28-251.0.1
glibc-langpack-da - update to 2.28-251.0.1
glibc-langpack-de - update to 2.28-251.0.1
glibc-langpack-cs - update to 2.28-251.0.1
glibc (Debian package) - addressed in versions 2.31-13+deb11u10, 2.36-9+deb12u7
glibc-profile - update to 2.33
glibc-i18n - update to 2.33
glibc - update to 2.33
aaa_glibc-solibs - update to 2.33
glibc-locale-archive - update to 2.34-150
sys-libs/glibc - update to 2.38-r13
glibc - update to 2.38-19.fc39
Red Hat OpenShift distributed tracing (RHOSDT) - update to 3.2.0
PowerStoreX OS - update to 3.2.1.5-2424458
PowerStore T - update to 3.6.1.4-2413340
Red Hat OpenShift Dev Spaces - update to 3.15.0
IBM OS Image for Red Hat Linux Systems - update to 4.0.4.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.57, 4.12.59, 4.13.42, 4.13.45, 4.14.26, 4.14.28, 4.14.32, 4.14.33, 4.15.14
OpenShift Virtualization - update to 4.14.6
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.2.0
watsonx Assistant Cartridge - update to 5.1.1
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
Red Hat Ceph Storage - update to 5.3
IBM Storage Scale System - addressed in versions 6.1.9.4, 6.2.1.0
Red Hat Migration Toolkit for Applications - update to 6.2.3
Session Smart Router - addressed in versions 6.2.10, 6.3.7
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
Red Hat Single Sign-On - update to 7.6.9
Dell EMC VxRail Appliance - update to 8.0.213
OpenShift Container Platform for Windows Containers - addressed in versions 8.1.3, 10.15.3
IBM Integrated Analytics System - update to 8.8.24.10.SP1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.17-r2, 9.3.5.1-r2
IBM Workload Scheduler - addressed in versions 10.1.0.5, 10.2.3
IBM Security Guardium - addressed in versions 11.0 p6509, 12.0 p6009
EMC Cloud Tiering Appliance - update to 13.2.0.2.31
Red Hat build of Keycloak - addressed in versions 22.0.11, 24.0.5

• https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005

• Multiple vulnerabilities in GNU Glibc
• SUSE update for glibc
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• openEuler update for glibc
• openEuler 20.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP2 update for glibc
• Ubuntu update for glibc
• openEuler 22.03 LTS SP3 update for glibc
• SUSE update for glibc
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 8.8 Extended Update Support update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9.0 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8.2 Advanced Update Support update for glibc
• Red Hat Enterprise Linux 7 update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless 1.33
• Multiple vulnerabilities in Service Interconnect 1.5
• Gentoo update for glibc
• Multiple vulnerabilities in Service Interconnect 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat Ceph Storage 5
• Debian update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Slackware Linux update for glibc
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in App Connect Enterprise Certified Container
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 10.15
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 8.1
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Red Hat build of Keycloak 24.0
• Multiple vulnerabilities in Red Hat build of Keycloak 22.0
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Fedora 39 update for glibc
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM QRadar SIEM
• IBM Integrated Analytics System update for GNU glibc
• Multiple vulnerabilities in Dell PowerStore T
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in IBM Workload Scheduler component of IBM Workload Automation
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Anolis OS update for glibc
• Anolis OS update for glibc
• Dell SmartFabric Storage Software update for third-party components
• Junos Space update for third-party components
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Security Verify Governance
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM Edge Application Manager
• Juniper Session Smart Router update for third-party components
• Multiple vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) 3.2