GNU glibc 2.18
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:glibc:2.18:*:*:*:*:*:*:*
part: a version: 2.18 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Glibc (b8610c0d-6ad8-566c-b276-03b23ae99324) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glibc |
purl2cpe | 2026-06-01 10:11:53.553714 |
pkg:github/bminor/glibc |
purl2cpe | 2026-06-01 10:11:53.553716 |
pkg:github/lattera/glibc |
purl2cpe | 2026-06-01 10:11:53.553717 |
pkg:gnu/glibc |
purl2cpe | 2026-06-01 10:11:53.553718 |
pkg:rpm/fedora/glibc |
purl2cpe | 2026-06-01 10:11:53.553720 |
pkg:rpm/opensuse/glibc |
purl2cpe | 2026-06-01 10:11:53.553721 |
pkg:sourceware/glibc |
purl2cpe | 2026-06-01 10:11:53.553722 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7547 |
vulnerable | 2026-06-08 05:07:01.346262 |
Details available
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Published: 2016-02-18T21:00:00.000Z
Updated: 2024-08-06T07:51:28.440Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6040 |
vulnerable | 2026-06-08 05:05:56.135012 |
Details available
GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.
Published: 2014-12-05T16:00:00.000Z
Updated: 2024-08-06T12:03:02.407Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0475 |
vulnerable | 2026-06-08 05:05:13.072198 |
Details available
Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.
Published: 2014-07-29T14:00:00.000Z
Updated: 2024-08-06T09:20:17.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4122 |
not_vulnerable | 2026-06-08 05:04:33.877623 |
Details available
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.
Published: 2013-10-27T00:00:00.000Z
Updated: 2024-08-06T16:30:50.049Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.