Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gv3-62jc-35qm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

EPSS

Процентиль: 60%
0.00403
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 5.9
ubuntu
около 8 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 3.3
redhat
около 8 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 5.9
nvd
около 8 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 5.9
debian
около 8 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) ...

suse-cvrf
около 7 лет назад

Recommended update for glibc

EPSS

Процентиль: 60%
0.00403
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-772