DeutschShown in its original language — a full translation is planned for a future version.
GNU libc: Mehrere Schwachstellen
view advisory published 2026-08-25
Ein Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher bezeichnete Angriffe durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-77117US | — | — | ||
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the convert… | ||||
| CVE-2026-19542US | — | — | ||
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash t… | ||||
| CVE-2026-19499US | — | — | ||
Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width pad… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:60865 vom 2026-08-30external
- Red Hat Security Advisory RHSA-2026:76781 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:79281 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:80798 vom 2026-10-12external
- Red Hat Bugtracker 2523249 vom 2026-08-25external
- Red Hat Bugtracker 2523258 vom 2026-08-25external
- Red Hat Bugtracker 2523274 vom 2026-08-25external
- Rocky Linux Security Advisory RLSA-2026:76781 vom 2026-10-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan