glibc vulnerabilities
CVEs whose affected-version data names the glibc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
62 CVEsRSS
CVE-2018-19591High· 7.5PoCIn the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed
In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
▾ Midnightgnu · glibcEPSS 5.5%via NVD
CVE-2016-10228Medium· 5.9The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid…
The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid…
▾ Sunlitgnu · glibcEPSS 4.1%via NVD