Skip to content
OpenAdvisories

Package · Debian

glibc

171 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-97399

    One-byte overread in strncasecmp on Power8

    The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the…

    The GNU C Library glibc glibc eglibc Debian Ubuntu
  • Low 3.6
    CVE-2026-95818

    AT_SECURE program buffer overflow via $ORIGIN processing

    A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH begi…

    The GNU C Library glibc glibc eglibc Debian Ubuntu
  • Low 2.1
    CVE-2026-6368

    wordexp with WRDE_APPEND can return or use invalid memory

    Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

    glibc glibc glibc eglibc Debian Ubuntu
  • Low 2.5
    CVE-2021-27645

    The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a req…

    glibc glibc Debian Ubuntu