GNU glibc 2.5
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*
part: a version: 2.5 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Glibc (b8610c0d-6ad8-566c-b276-03b23ae99324) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glibc |
purl2cpe | 2026-06-01 10:11:53.554500 |
pkg:github/bminor/glibc |
purl2cpe | 2026-06-01 10:11:53.554502 |
pkg:github/lattera/glibc |
purl2cpe | 2026-06-01 10:11:53.554503 |
pkg:gnu/glibc |
purl2cpe | 2026-06-01 10:11:53.554504 |
pkg:rpm/fedora/glibc |
purl2cpe | 2026-06-01 10:11:53.554506 |
pkg:rpm/opensuse/glibc |
purl2cpe | 2026-06-01 10:11:53.554507 |
pkg:sourceware/glibc |
purl2cpe | 2026-06-01 10:11:53.554508 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000409 |
vulnerable | 2026-06-08 05:08:34.506307 |
Details available
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
Published: 2018-02-01T04:00:00.000Z
Updated: 2024-08-05T22:00:39.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4122 |
not_vulnerable | 2026-06-08 05:04:33.873462 |
Details available
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.
Published: 2013-10-27T00:00:00.000Z
Updated: 2024-08-06T16:30:50.049Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1914 |
vulnerable | 2026-06-08 05:03:57.248799 |
Details available
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
Published: 2013-04-29T22:00:00.000Z
Updated: 2024-08-06T15:20:37.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3406 |
vulnerable | 2026-06-08 05:02:09.637158 |
Details available
The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405.
Published: 2014-02-10T17:00:00.000Z
Updated: 2024-08-06T20:05:12.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1659 |
vulnerable | 2026-06-08 04:58:01.212027 |
Details available
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
Published: 2011-04-08T15:00:00.000Z
Updated: 2024-08-06T22:37:24.569Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1658 |
vulnerable | 2026-06-08 04:58:01.209776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1095 |
vulnerable | 2026-06-08 04:57:55.678982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1089 |
vulnerable | 2026-06-08 04:57:55.095914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1071 |
vulnerable | 2026-06-08 04:57:54.976502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3856 |
vulnerable | 2026-06-08 04:55:17.613257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3847 |
vulnerable | 2026-06-08 04:55:17.553307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0830 |
vulnerable | 2026-06-08 04:52:04.640695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0296 |
vulnerable | 2026-06-08 04:52:01.638293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4881 |
vulnerable | 2026-06-08 04:51:50.339110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4880 |
vulnerable | 2026-06-08 04:51:50.326344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.