CVE-2017-15671: Medium severity GNU glibc vulnerability
Published Oct 20, 2017
·Updated
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOBTILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).
Affected Software
1 affected component
GNU glibc<=2.26
Remediation
Patch Available
Event History
Oct 20, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15671?
CVE-2017-15671 has a medium severity rating with a score of 5.9.
2
How do I fix CVE-2017-15671?
To fix CVE-2017-15671, upgrade to GNU glibc version 2.27 or later.
3
What causes the vulnerability CVE-2017-15671?
CVE-2017-15671 is caused by the glob function skipping memory deallocation when processing the ~ operator with a long user name.
4
What is affected by CVE-2017-15671?
CVE-2017-15671 affects the GNU glibc library versions before 2.27.
5
What type of security issue is CVE-2017-15671?
CVE-2017-15671 is a denial of service vulnerability due to a memory leak.