{"schema_version":"1","data":[{"id":28460,"advisory_id":"c552fbda-b706-4f84-99dd-d562b374f525","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-6238","source_published_at":"2026-04-28T16:43:08.526+00:00","published_at":"2026-10-25T07:43:01.191286+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-6238"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Buffer overread in ns_printrrf with corrupted RDATA field","summary":"The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.","evidence":"cve:CVE-2026-6238","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-6238","aliases":["CVE-2026-6238"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.0.1","versionType":"custom","lessThanOrEqual":"2.43"}],"defaultStatus":"affected"}],"modified":"2026-10-15T01:12:16.267Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34069","https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-6238","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-28T18:51:21.285963Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-28T18:51:25.367Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:16.267Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-06-19T20:40:00.060Z"}}},"related_cves":[{"value":"CVE-2026-6238","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28457,"advisory_id":"3edf0300-a4e5-41c4-8c4e-2f56747f4409","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5928","source_published_at":"2026-04-20T20:37:31.743+00:00","published_at":"2026-10-25T07:42:59.142314+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-5928"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Potential buffer under-read in ungetwc","summary":"Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.","evidence":"cve:CVE-2026-5928","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-5928","aliases":["CVE-2026-5928"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.1.1-89","versionType":"custom","lessThanOrEqual":"2.43"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:14.900Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=33998"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-5928","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-21T16:10:57.731635Z"}}}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33998","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-21T19:49:59.071Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:14.900Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-04-30T15:43:07.240Z"}}},"related_cves":[{"value":"CVE-2026-5928","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28456,"advisory_id":"6ad810a6-2742-412d-b332-e1b4b7c9a205","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5450","source_published_at":"2026-04-20T20:55:41.17+00:00","published_at":"2026-10-25T07:42:58.482405+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-5450"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"scanf %mc off-by-one heap buffer overflow","summary":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.","evidence":"cve:CVE-2026-5450","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-5450","aliases":["CVE-2026-5450"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.7","lessThan":"*","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:13.391Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-5450","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-04-21T16:11:50.875542Z"}}}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-21T19:49:53.221Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:13.391Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-04-20T20:55:41.170Z"}}},"related_cves":[{"value":"CVE-2026-5450","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28455,"advisory_id":"840881b5-f017-4db2-b12f-3dd13f89508a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-5435","source_published_at":"2026-04-28T11:58:54.962+00:00","published_at":"2026-10-25T07:42:57.825048+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-5435"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Potential buffer overflow in ns_sprintrrf TSIG handling path","summary":"The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.","evidence":"cve:CVE-2026-5435","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-5435","aliases":["CVE-2026-5435"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.2","versionType":"custom","lessThanOrEqual":"*"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:12.018Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34033","https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-5435","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-28T15:15:07.411547Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-28T15:21:13.800Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:12.018Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-04-28T11:58:54.962Z"}}},"related_cves":[{"value":"CVE-2026-5435","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28357,"advisory_id":"a1636dfa-d7a0-4b38-bfd2-aec4bfdd4a3b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-4438","source_published_at":"2026-03-20T19:59:06.064+00:00","published_at":"2026-10-25T07:41:07.405765+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-4438"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames","summary":"Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.","evidence":"cve:CVE-2026-4438","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-4438","aliases":["CVE-2026-4438"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.34","versionType":"custom","lessThanOrEqual":"2.43"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:10.681Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34015"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-4438","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-23T15:06:13.636418Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-88","description":"CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-23T15:06:16.376Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:10.681Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-03-20T19:59:06.064Z"}}},"related_cves":[{"value":"CVE-2026-4438","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28356,"advisory_id":"a18da10a-3671-446c-9f6a-b1ffa0fc18f7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-4437","source_published_at":"2026-03-20T19:59:00.427+00:00","published_at":"2026-10-25T07:41:06.819769+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-4437"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response","summary":"Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.","evidence":"cve:CVE-2026-4437","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-4437","aliases":["CVE-2026-4437"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.34","versionType":"custom","lessThanOrEqual":"2.43"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:09.122Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34014"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-4437","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-23T15:10:34.650805Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-23T15:13:56.930Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:09.122Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-03-20T19:59:00.427Z"}}},"related_cves":[{"value":"CVE-2026-4437","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28334,"advisory_id":"659c83b6-04eb-4c64-936a-febab6b4f3f5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-4046","source_published_at":"2026-03-30T17:16:11.021+00:00","published_at":"2026-10-25T07:40:53.34695+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-4046"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"iconv crash due to assertion failure with untrusted input","summary":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.","evidence":"cve:CVE-2026-4046","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-4046","aliases":["CVE-2026-4046"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.3.3","versionType":"custom","lessThanOrEqual":"2.43"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:07.813Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-4046","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-30T17:33:59.227677Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-30T17:35:48.736Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:07.813Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-04-20T21:02:31.443Z"}}},"related_cves":[{"value":"CVE-2026-4046","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28332,"advisory_id":"91365397-84bf-425b-974c-0efaec116703","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-3904","source_published_at":"2026-03-11T13:19:09.741+00:00","published_at":"2026-10-25T07:40:52.124826+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-3904"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-3904","summary":"Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on inputs that are concurrently modified by other processes or threads and crash. The nscd client in the GNU C Library uses the memcmp function with inputs that may be concurrently modified by another thread, potentially resulting in spurious cache misses, which in itself is not a security issue. However in the GNU C Library version 2.36 an optimized implementation of memcmp was introduced for x86_64 which could crash when invoked with such undefined behaviour, turning this into a potential crash of the nscd client and the application that uses it. This implementation was backported to the 2.35 branch, making the nscd client in that branch vulnerable as well. Subsequently, the fix for this issue was backported to all vulnerable branches in the GNU C Library repository. It is advised that distributions that may have cherry-picked the memcpy SSE2 optimization in their copy of the GNU C Library, also apply the fix to avoid the potential crash in the nscd client.","evidence":"cve:CVE-2026-3904","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-3904","aliases":["CVE-2026-3904"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.35","lessThan":"2.37","versionType":"custom"}],"platforms":["x86"],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:06.140Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0004;hb=HEAD","https://sourceware.org/bugzilla/show_bug.cgi?id=29863","https://sourceware.org/git/?p=glibc.git;a=commit;h=8804157ad9da39631703b92315460808eac86b0c","https://sourceware.org/git/?p=glibc.git;a=commit;h=b712be52645282c706a5faa038242504feb06db5"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/03/11/5"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-03-11T15:16:39.402Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-3904","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-03-11T15:56:03.349329Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-03-11T15:56:23.027Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"V3.1.6","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:06.140Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-03-11T13:19:09.741Z"}}},"related_cves":[{"value":"CVE-2026-3904","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26881,"advisory_id":"2cce1fc9-4379-4ba1-a944-5a355d716949","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-0395","source_published_at":"2025-01-22T13:11:30.406+00:00","published_at":"2026-10-25T07:16:20.35586+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2025-0395"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2025-0395","summary":"When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.","evidence":"cve:CVE-2025-0395","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-0395","aliases":["CVE-2025-0395"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.13","versionType":"custom","lessThanOrEqual":"2.40"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:01:52.824Z","provider":"cve","references":["https://www.openwall.com/lists/oss-security/2025/01/22/4","https://sourceware.org/bugzilla/show_bug.cgi?id=32582","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001","https://sourceware.org/pipermail/libc-announce/2025/000044.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/01/22/4"},{"url":"http://www.openwall.com/lists/oss-security/2025/01/23/2"},{"url":"https://security.netapp.com/advisory/ntap-20250228-0006/"},{"url":"http://www.openwall.com/lists/oss-security/2025/04/13/1"},{"url":"http://www.openwall.com/lists/oss-security/2025/04/24/7"},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-04-30T05:03:13.011Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-0395","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-02-04T20:45:32.215090Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-04T20:45:35.724Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","versions":[{"status":"affected","version":"0","lessThan":"V2.17.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:01:52.824Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2025-01-22T15:29:51.366Z"}}},"related_cves":[{"value":"CVE-2025-0395","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26508,"advisory_id":"07ff107c-59de-47c2-a32b-e04d62229eae","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-33602","source_published_at":"2024-05-06T19:22:12.383+00:00","published_at":"2026-10-25T07:09:53.109546+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2024-33602"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"nscd: netgroup cache assumes NSS callback uses in-buffer strings","summary":"nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.","evidence":"cve:CVE-2024-33602","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-33602","aliases":["CVE-2024-33602"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:40:40.109Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008","https://security.netapp.com/advisory/ntap-20240524-0012/","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-33602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-06-13T16:09:29.755117Z"}}}],"affected":[{"cpes":["cpe:2.3:a:gnu:glibc:2.15:*:*:*:*:*:*:*"],"vendor":"gnu","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-13T16:26:29.854Z"}},{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0012/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T02:36:04.479Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:40:40.109Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2024-07-22T18:06:04.473Z"}}},"related_cves":[{"value":"CVE-2024-33602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26507,"advisory_id":"c11c5615-b144-4acc-b380-3b0f3e23a0ab","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-33601","source_published_at":"2024-05-06T19:22:07.763+00:00","published_at":"2026-10-25T07:09:52.543776+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2024-33601"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"nscd: netgroup cache may terminate daemon on memory allocation failure","summary":"nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.","evidence":"cve:CVE-2024-33601","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-33601","aliases":["CVE-2024-33601"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:40:38.807Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://security.netapp.com/advisory/ntap-20240524-0014/","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-33601","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-09T17:26:01.322253Z"}}}],"affected":[{"cpes":["cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*"],"vendor":"gnu","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-18T13:55:13.348Z"}},{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0014/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T02:36:04.342Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:40:38.807Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2024-07-22T18:06:12.587Z"}}},"related_cves":[{"value":"CVE-2024-33601","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26506,"advisory_id":"a936a363-bcca-4dc5-b148-f1651bfe3f0f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-33600","source_published_at":"2024-05-06T19:22:02.726+00:00","published_at":"2026-10-25T07:09:51.943364+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2024-33600"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"nscd: Null pointer crashes after notfound response","summary":"nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.","evidence":"cve:CVE-2024-33600","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-33600","aliases":["CVE-2024-33600"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:40:37.522Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://security.netapp.com/advisory/ntap-20240524-0013/","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-33600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-07T19:13:16.760599Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-27T14:41:14.484Z"}},{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0013/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T02:36:04.168Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:40:37.522Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2024-07-22T18:06:08.949Z"}}},"related_cves":[{"value":"CVE-2024-33600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26505,"advisory_id":"19ede9bf-348e-4505-b765-11eb53e090b0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-33599","source_published_at":"2024-05-06T19:21:54.314+00:00","published_at":"2026-10-25T07:09:51.353234+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2024-33599"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"nscd: Stack-based buffer overflow in netgroup cache","summary":"nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.","evidence":"cve:CVE-2024-33599","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-33599","aliases":["CVE-2024-33599"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.15","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:40:36.022Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://security.netapp.com/advisory/ntap-20240524-0011/","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-33599","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-29T19:01:02.703174Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-26T20:40:00.393Z"}},{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0011/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T02:36:04.290Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:40:36.022Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2024-07-22T18:06:10.829Z"}}},"related_cves":[{"value":"CVE-2024-33599","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26504,"advisory_id":"064638a3-3ee0-4d9d-b9d2-9373974e244f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-2961","source_published_at":"2024-04-17T17:27:40.541+00:00","published_at":"2026-10-25T07:09:50.744865+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2024-2961"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2024-2961","summary":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.","evidence":"cve:CVE-2024-2961","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-2961","aliases":["CVE-2024-2961"],"metrics":[],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.1.93","lessThan":"2.40","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:25:24.488Z","provider":"cve","references":["https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://security.netapp.com/advisory/ntap-20240531-0002/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-2961","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-05-01T00:00:00+00:00"}}}],"affected":[{"cpes":["cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*"],"vendor":"gnu","product":"glibc","versions":[{"status":"affected","version":"2.1.93","lessThan":"2.40","versionType":"semver"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-10-30T03:55:59.233Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ambionics.io/blog/iconv-cve-2024-2961-p1"},{"url":"https://www.ambionics.io/blog/iconv-cve-2024-2961-p2"},{"url":"https://www.ambionics.io/blog/iconv-cve-2024-2961-p3"},{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/24/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/17/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/18/4","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/3","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240531-0002/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5","tags":["x_transferred"]}],"x_generator":{"engine":"ADPogram 0.0.1"},"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-11-15T15:22:29.055Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:25:24.488Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2024-07-22T18:06:06.282Z"}}},"related_cves":[{"value":"CVE-2024-2961","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24297,"advisory_id":"c8e526ec-b687-43a8-aa37-e8ed1b9998f1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6779","source_published_at":"2024-01-31T14:07:41.967+00:00","published_at":"2026-10-25T06:33:09.974917+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6779"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","summary":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6779","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6779","aliases":["CVE-2023-6779"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:19.456Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6779","https://bugzilla.redhat.com/show_bug.cgi?id=2254395","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240223-0006/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6779","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254395","name":"RHBZ#2254395","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240223-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:42:07.403Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6779","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-13T16:08:30.700931Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-13T16:08:42.227Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:19.456Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-23T16:05:57.859Z"}}},"related_cves":[{"value":"CVE-2023-6779","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24295,"advisory_id":"efb8afea-2a97-4b03-b0b2-bebf9c7379e1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6780","source_published_at":"2024-01-31T14:08:02.61+00:00","published_at":"2026-10-25T06:33:08.581146+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6780"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: integer overflow in __vsyslog_internal()","summary":"An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6780","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-6780","aliases":["CVE-2023-6780"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:20.900Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6780","https://bugzilla.redhat.com/show_bug.cgi?id=2254396","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6780","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254396","name":"RHBZ#2254396","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20250207-0010/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-02-07T17:02:41.644Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6780","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-01-31T16:36:34.378685Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-17T21:29:19.534Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:20.900Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-03-26T15:30:47.720Z"}}},"related_cves":[{"value":"CVE-2023-6780","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24293,"advisory_id":"899fe0cb-2a44-44fa-b0b8-921c86d4ecc8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6246","source_published_at":"2024-01-31T14:06:21.949+00:00","published_at":"2026-10-25T06:33:07.419804+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6246"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: heap-based buffer overflow in __vsyslog_internal()","summary":"A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.","evidence":"cve:CVE-2023-6246","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6246","aliases":["CVE-2023-6246"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.4,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:16.680Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6246","https://bugzilla.redhat.com/show_bug.cgi?id=2249053","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240216-0007/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Read-Write.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/5","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6246","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249053","name":"RHBZ#2249053","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0007/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:18.105Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-02-09T05:00:28.307432Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-10-17T17:53:03.744Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:16.680Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-16T13:05:53.547Z"}}},"related_cves":[{"value":"CVE-2023-6246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21643,"advisory_id":"db05c9b2-8812-44e9-a9b6-0cdd730929ba","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-3999","source_published_at":"2022-08-24T00:00:00+00:00","published_at":"2026-10-25T05:48:21.699477+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2021-3999"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2021-3999","summary":"A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.","evidence":"cve:CVE-2021-3999","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-3999","aliases":["CVE-2021-3999"],"metrics":[],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"affected","version":"Fixed in glibc v2.31 and above."}]}],"modified":"2026-10-14T09:59:03.285Z","provider":"cve","references":["https://www.openwall.com/lists/oss-security/2022/01/24/4","https://sourceware.org/bugzilla/show_bug.cgi?id=28769","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e","https://bugzilla.redhat.com/show_bug.cgi?id=2024637","https://access.redhat.com/security/cve/CVE-2021-3999","https://security-tracker.debian.org/tracker/CVE-2021-3999","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.netapp.com/advisory/ntap-20221104-0001/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openwall.com/lists/oss-security/2022/01/24/4","tags":["x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=28769","tags":["x_transferred"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e","tags":["x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024637","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3999","tags":["x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3999","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","name":"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update","tags":["mailing-list","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20221104-0001/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T17:16:03.318Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2021-3999","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-12-02T20:54:28.821189Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-02T20:54:34.966Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T09:59:03.285Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2022-11-04T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2021-3999","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21642,"advisory_id":"32ec37ad-1efb-4753-8b94-eb219a471407","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-3998","source_published_at":"2022-08-24T00:00:00+00:00","published_at":"2026-10-25T05:48:21.137431+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2021-3998"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2021-3998","summary":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","evidence":"cve:CVE-2021-3998","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-3998","aliases":["CVE-2021-3998"],"metrics":[],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"affected","version":"Affects glibc v2.33 and above."}]}],"modified":"2026-10-14T09:54:24.028Z","provider":"cve","references":["https://www.openwall.com/lists/oss-security/2022/01/24/4","https://sourceware.org/bugzilla/show_bug.cgi?id=28770","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03","https://bugzilla.redhat.com/show_bug.cgi?id=2024633","https://access.redhat.com/security/cve/CVE-2021-3998","https://security-tracker.debian.org/tracker/CVE-2021-3998","https://security.netapp.com/advisory/ntap-20221020-0003/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openwall.com/lists/oss-security/2022/01/24/4","tags":["x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=28770","tags":["x_transferred"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb","tags":["x_transferred"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03","tags":["x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024633","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3998","tags":["x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3998","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20221020-0003/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T17:16:03.378Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2021-3998","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-09T14:59:39.057370Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-09T15:00:17.349Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T09:54:24.028Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2022-10-20T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2021-3998","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21550,"advisory_id":"7327e6db-9cc2-47aa-ba1d-fea135507148","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1752","source_published_at":"2020-04-30T00:00:00+00:00","published_at":"2026-10-25T05:47:24.495926+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2020-1752"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2020-1752","summary":"A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.","evidence":"cve:CVE-2020-1752","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2020-1752","aliases":["CVE-2020-1752"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"GNU Libc","product":"glibc","versions":[{"status":"affected","version":"Affected: versions 2.14 and later"},{"status":"affected","version":"Fixed: version 2.32"}]}],"modified":"2026-10-14T08:06:57.950Z","provider":"cve","references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752","https://sourceware.org/bugzilla/show_bug.cgi?id=25414","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c","https://security.netapp.com/advisory/ntap-20200511-0005/","https://usn.ubuntu.com/4416-1/","https://security.gentoo.org/glsa/202101-20","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752","tags":["x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=25414","tags":["x_transferred"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20200511-0005/","tags":["x_transferred"]},{"url":"https://usn.ubuntu.com/4416-1/","name":"USN-4416-1","tags":["vendor-advisory","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202101-20","name":"GLSA-202101-20","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","name":"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","name":"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-04T06:46:30.943Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:06:57.950Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2022-10-17T00:00:00.000Z"}}},"related_cves":[{"value":"CVE-2020-1752","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21549,"advisory_id":"1c54da84-a0b5-46c6-a513-acefc30c2700","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1751","source_published_at":"2020-04-17T18:32:44+00:00","published_at":"2026-10-25T05:47:23.888552+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2020-1751"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2020-1751","summary":"An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.","evidence":"cve:CVE-2020-1751","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2020-1751","aliases":["CVE-2020-1751"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"Red Hat","product":"glibc","versions":[{"status":"affected","version":"2.31"}]}],"modified":"2026-10-14T08:02:09.581Z","provider":"cve","references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751","https://sourceware.org/bugzilla/show_bug.cgi?id=25423","https://security.netapp.com/advisory/ntap-20200430-0002/","https://security.gentoo.org/glsa/202006-04","https://usn.ubuntu.com/4416-1/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=25423","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20200430-0002/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202006-04","name":"GLSA-202006-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://usn.ubuntu.com/4416-1/","name":"USN-4416-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-04T06:46:30.859Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:02:09.581Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2020-07-09T19:06:12.000Z"}}},"related_cves":[{"value":"CVE-2020-1751","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":21545,"advisory_id":"317d08a1-ad45-465f-b938-44603d123808","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-1010025","source_published_at":"2019-07-15T03:11:46+00:00","published_at":"2026-10-25T05:47:21.22767+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2019-1010025"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2019-1010025","summary":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.","evidence":"cve:CVE-2019-1010025","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1010025","aliases":["CVE-2019-1010025"],"metrics":[],"affected":[{"vendor":"GNU Libc","product":"glibc","versions":[{"status":"affected","version":"current (At least as of 2018-02-16)"}]}],"modified":"2026-10-14T08:02:04.966Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://ubuntu.com/security/CVE-2019-1010025"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22853","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.f5.com/csp/article/K06046097","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","name":"CVE-2019-1010025","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://ubuntu.com/security/CVE-2019-1010025","name":"CVE-2019-1010025","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:07:18.221Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:02:04.966Z"}}],"cna":{"orgId":"7556d962-6fb7-411e-85fa-6cd62f095ba8","shortName":"dwf","dateUpdated":"2020-11-16T19:48:53.000Z"}}},"related_cves":[{"value":"CVE-2019-1010025","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21544,"advisory_id":"10a02aa5-9d6b-4534-8725-bc508e168cbb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-1010024","source_published_at":"2019-07-15T03:06:26+00:00","published_at":"2026-10-25T05:47:20.420501+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2019-1010024"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2019-1010024","summary":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.","evidence":"cve:CVE-2019-1010024","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1010024","aliases":["CVE-2019-1010024"],"metrics":[],"affected":[{"vendor":"GNU Libc","product":"glibc","versions":[{"status":"affected","version":"current (At least as of 2018-02-16)"}]}],"modified":"2026-10-14T08:02:01.378Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://ubuntu.com/security/CVE-2019-1010024"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22852","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/109162","name":"109162","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://support.f5.com/csp/article/K06046097","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","name":"CVE-2019-1010024","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://ubuntu.com/security/CVE-2019-1010024","name":"CVE-2019-1010024","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:07:18.291Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:02:01.378Z"}}],"cna":{"orgId":"7556d962-6fb7-411e-85fa-6cd62f095ba8","shortName":"dwf","dateUpdated":"2020-11-16T19:46:23.000Z"}}},"related_cves":[{"value":"CVE-2019-1010024","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21543,"advisory_id":"b7321519-ce83-4faf-b5c1-40b87b31311d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-1010023","source_published_at":"2019-07-15T03:09:37+00:00","published_at":"2026-10-25T05:47:19.458301+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2019-1010023"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2019-1010023","summary":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.","evidence":"cve:CVE-2019-1010023","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1010023","aliases":["CVE-2019-1010023"],"metrics":[],"affected":[{"vendor":"GNU Libc","product":"glibc","versions":[{"status":"affected","version":"current (At least as of 2018-02-16)"}]}],"modified":"2026-10-14T08:01:59.767Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://ubuntu.com/security/CVE-2019-1010023"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2019-1010023","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-06-11T18:42:21.452782Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-11T18:43:16.622Z"}},{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22851","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/109167","name":"109167","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","name":"CVE-2019-1010023","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://ubuntu.com/security/CVE-2019-1010023","name":"CVE-2019-1010023","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:07:18.214Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:01:59.767Z"}}],"cna":{"orgId":"7556d962-6fb7-411e-85fa-6cd62f095ba8","shortName":"dwf","dateUpdated":"2020-11-16T19:43:22.000Z"}}},"related_cves":[{"value":"CVE-2019-1010023","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":21542,"advisory_id":"f60357ed-5cee-4a5c-9cd9-4b4818d1a76e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-1010022","source_published_at":"2019-07-15T03:00:51+00:00","published_at":"2026-10-25T05:47:18.78981+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2019-1010022"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2019-1010022","summary":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.","evidence":"cve:CVE-2019-1010022","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1010022","aliases":["CVE-2019-1010022"],"metrics":[],"affected":[{"vendor":"GNU C Library","product":"glibc","versions":[{"status":"affected","version":"current (At least as of 2018-02-16)"}]}],"modified":"2026-10-14T08:01:58.323Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://ubuntu.com/security/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22850","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","name":"CVE-2019-1010022","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://ubuntu.com/security/CVE-2019-1010022","name":"CVE-2019-1010022","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:07:18.071Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2019-1010022","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-04-24T16:01:23.968883Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-11-15T15:04:27.415Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T08:01:58.323Z"}}],"cna":{"orgId":"7556d962-6fb7-411e-85fa-6cd62f095ba8","shortName":"dwf","dateUpdated":"2021-06-10T16:12:20.000Z"}}},"related_cves":[{"value":"CVE-2019-1010022","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":3240,"advisory_id":"ee7b0fd2-96a7-43ad-b18c-aba3a91fc18f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97399","source_published_at":"2026-09-28T15:21:02.09+00:00","published_at":"2026-10-24T21:31:41.884008+00:00","extraction_method":"structured","technologies":["core-cve","glibc"],"cve_ids":["CVE-2026-97399"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"One-byte overread in strncasecmp on Power8","summary":"The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.","evidence":"cve:CVE-2026-97399","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-97399","aliases":["CVE-2026-97399"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.7,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"The GNU C Library","product":"glibc","versions":[{"status":"affected","version":"2.24","lessThan":"2.45","versionType":"custom"}],"platforms":["Power8"],"defaultStatus":"unaffected"}],"modified":"2026-09-28T17:07:36.744Z","provider":"cve","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34683","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97399","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T15:33:28.320527Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:22:25.647Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/09/28/7"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-09-28T17:07:36.744Z"}}],"cna":{"orgId":"3ff69d7a-14f2-4f67-a097-88dee7810d18","shortName":"glibc","dateUpdated":"2026-09-28T15:21:02.090Z"}}},"related_cves":[{"value":"CVE-2026-97399","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":28460,"next_before":3240}