← Back

Glibc

glibc

Vendor: Gnu • 163 CVEs

CVEs (163)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gnu
1Glibc
Apr 16, 2026
Dec 19, 2000
N/A· v4
N/A· v3
1.2 LOW· v2
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
1Gnu
1Glibc
Apr 16, 2026
Nov 14, 2000
N/A· v4
N/A· v3
7.2 HIGH· v2
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by spe...Show more
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.Show less
2Gnu
Isc
2Bind
Glibc
Apr 16, 2026
May 3, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.