Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gv3-62jc-35qm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

EPSS

Процентиль: 72%
0.01431
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 9 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 3.3
redhat
почти 9 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 5.9
nvd
почти 9 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

CVSS3: 5.9
debian
почти 9 лет назад

The glob function in glob.c in the GNU C Library (aka glibc or libc6) ...

suse-cvrf
почти 8 лет назад

Recommended update for glibc

EPSS

Процентиль: 72%
0.01431
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-772