CVE-2017-15804: Buffer Overflow
Last updated 25 August 2025
Other sources
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-15804?
CVE-2017-15804 is a vulnerability in the GNU C Library (glibc) that allows a buffer overflow during unescaping of user names with the ~ operator.
What is the severity of CVE-2017-15804?
The severity of CVE-2017-15804 is critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2017-15804?
The affected software versions include glibc 2.19-0ubuntu6.14, glibc 2.26-0ubuntu2.1, glibc 2.27, glibc 2.23-0ubuntu10, and various versions of glibc from 2.28-10+deb10u1 to 2.37-12.
How can I fix CVE-2017-15804?
To fix CVE-2017-15804, update to the latest available version of glibc, such as version 2.27 or higher.
Where can I find more information about CVE-2017-15804?
More information about CVE-2017-15804 can be found on the MITRE CVE database, Ubuntu Security Notices, and the NIST National Vulnerability Database.