Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Glibc (b8610c0d-6ad8-566c-b276-03b23ae99324) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glibc |
purl2cpe | 2026-06-01 10:11:53.488127 |
pkg:github/bminor/glibc |
purl2cpe | 2026-06-01 10:11:53.488128 |
pkg:github/lattera/glibc |
purl2cpe | 2026-06-01 10:11:53.488130 |
pkg:gnu/glibc |
purl2cpe | 2026-06-01 10:11:53.488131 |
pkg:rpm/fedora/glibc |
purl2cpe | 2026-06-01 10:11:53.488133 |
pkg:rpm/opensuse/glibc |
purl2cpe | 2026-06-01 10:11:53.488134 |
pkg:sourceware/glibc |
purl2cpe | 2026-06-01 10:11:53.488135 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33601 |
vulnerable | 2026-06-08 06:37:31.762380 |
nscd: netgroup cache may terminate daemon on memory allocation failure
nscd: netgroup cache may terminate daemon on memory allocation failure
The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or
xrealloc and these functions may terminate the process due to a memory
allocation failure resulting in a denial of service to the clients. The
flaw was introduced in glibc 2.15 when the cache was added to nscd.
This vulnerability is only present in the nscd binary.
Published: 2024-05-06T19:22:07.763Z
Updated: 2026-07-14T12:37:52.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2961 |
vulnerable | 2026-06-08 06:35:27.807126 |
Details available
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Published: 2024-04-17T17:27:40.541Z
Updated: 2026-07-14T12:33:31.752Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010025 |
vulnerable | 2026-06-08 05:12:21.565203 |
Details available
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.
Published: 2019-07-15T03:11:46.000Z
Updated: 2024-08-05T03:07:18.221Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010024 |
vulnerable | 2026-06-08 05:12:21.564828 |
Details available
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
Published: 2019-07-15T03:06:26.000Z
Updated: 2024-08-05T03:07:18.291Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010023 |
vulnerable | 2026-06-08 05:12:21.564283 |
Details available
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
Published: 2019-07-15T03:09:37.000Z
Updated: 2024-08-05T03:07:18.214Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1010022 |
vulnerable | 2026-06-08 05:12:21.563062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.