Description
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| compat-glibc | Red Hat / Red Hat Enterprise Linux 7 | any version | unknown |
| glibc | Red Hat / Red Hat Enterprise Linux 7 | any version | unknown |
| glibc | Red Hat / Red Hat Enterprise Linux 6 | any version | unknown |
| glibc | Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support | >= 0:2.28-189.6.el8_6, < * | unaffected |
| glibc | Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | >= 0:2.28-189.6.el8_6, < * | unaffected |
| glibc | Red Hat / Red Hat Enterprise Linux 8 | >= 0:2.28-225.el8_8.6, < * | unaffected |
| glibc | Red Hat / Red Hat Enterprise Linux 8 | >= 0:2.28-225.el8_8.6, < * | unaffected |
| glibc | Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support | >= 0:2.34-28.el9_0.4, < * | unaffected |
| glibc | Red Hat / Red Hat Enterprise Linux 9 | >= 0:2.34-60.el9_2.7, < * | unaffected |
| glibc | Red Hat / Red Hat Enterprise Linux 9 | >= 0:2.34-60.el9_2.7, < * | unaffected |
| glibc | — | >= 2.34, < 2.39 | affected |
| redhat-release-virtualization-host | Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | >= 0:4.5.3-10.el8ev, < * | unaffected |
| redhat-virtualization-host | Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | >= 0:4.5.3-202312060823_8.6, < * | unaffected |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * | affected |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * | affected |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.5, < * | affected |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.5, < * | affected |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | Siemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | >= 0, < V1.1 | affected |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * | affected |