7.5Yüksek

CVE-2025-15281wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

The GNU C Library glibc Yayım: 2026-01-20 16:22 (9 ay önce)

Açıklama

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Zayıflık türü (CWE): CWE-908

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
gnu	glibc	2.0 – < 2.43
The GNU C Library	glibc	2.0 – ≤ 2.42

Kaynaklar ve yamalar

https://sourceware.org/bugzilla/show_bug.cgi?id=33814 Issue TrackingPatch
http://www.openwall.com/lists/oss-security/2026/01/20/3 Mailing ListThird Party Advisory

CPE eşleşmeleri (NVD) (1)

cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* ≥ 2.0 < 2.43

CVSS puanı

7.5Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tüm puanlar (2)

CISA-ADP	CVSS 3.1	7.5Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5Yüksek

EPSS (30 günde istismar olasılığı)

0.49%

tüm CVE'lerin %43'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: yes
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2025-12-29
Yayımlandı2026-01-20 16:22
IP-DB'ye ulaştı2026-10-25 00:01
Son güncelleme2026-06-17 11:37

Numarayı veren (CNA): glibc
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — GNU C Library (glibc)

3.7Düşük

CVE-2026-100290 2 gün önce

Double free after allocation failure in regcomp and regexec

The GNU C Library glibc

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The re_dfa_add_node (the NFA node ta…

4.8Orta

CVE-2026-115819 2 gün önce

One-byte buffer overflow in wide scanf %s and %[ conversions

The GNU C Library glibc

Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the…

5.9Orta

CVE-2026-122054 9 gün önce

BIG-HKSCS decoding hang on crafted input

The GNU C Library glibc

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang.

7.0Yüksek

CVE-2026-84243 14 gün önce

gettext: Directory traversal via the LANGUAGE environment variable

The GNU C Library glibc

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid (AT_SECURE). An attacker who can set LANGUAGE in the en…

3.7Düşük

CVE-2026-97399 1 ay önce

One-byte overread in strncasecmp on Power8

The GNU C Library glibc

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to th…

3.6Düşük

CVE-2026-95818 1 ay önce

AT_SECURE program buffer overflow via $ORIGIN processing

The GNU C Library glibc

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH beg…