CVE catalog

CVE-2017-1000366

glibc: CVE-2017-1000366

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.73% · Oct 25, 2026

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4fixed
Debianglibcbookworm2.36-9+deb12u14fixed
Debianglibcbookworm-security2.36-9+deb12u7fixed
Ubuntueglibc14.042.17-93ubuntu4vulnerable
Ubuntueglibc14.042.18-0ubuntu1vulnerable
Ubuntueglibc14.042.18-0ubuntu2vulnerable
Ubuntueglibc14.042.18-0ubuntu4vulnerable
Ubuntueglibc14.042.18-0ubuntu5vulnerable
Ubuntueglibc14.042.18-0ubuntu6vulnerable
Ubuntueglibc14.042.18-0ubuntu7vulnerable
Ubuntueglibc14.042.19-0ubuntu2vulnerable
Ubuntueglibc14.042.19-0ubuntu3vulnerable
Ubuntueglibc14.042.19-0ubuntu4vulnerable
Ubuntueglibc14.042.19-0ubuntu5vulnerable
Ubuntueglibc14.042.19-0ubuntu6vulnerable
Ubuntueglibc14.042.19-0ubuntu6.1vulnerable
Ubuntueglibc14.042.19-0ubuntu6.3vulnerable
Ubuntueglibc14.042.19-0ubuntu6.4vulnerable
Ubuntueglibc14.042.19-0ubuntu6.5vulnerable
Ubuntueglibc14.042.19-0ubuntu6.6vulnerable
Ubuntueglibc14.042.19-0ubuntu6.7vulnerable
Ubuntueglibc14.042.19-0ubuntu6.8vulnerable
Ubuntueglibc14.042.19-0ubuntu6.9vulnerable
Ubuntueglibc14.042.19-0ubuntu6.10vulnerable
Ubuntueglibc14.042.19-0ubuntu6.11vulnerable
Ubuntueglibc14.042.19-0ubuntu6.13fixed
Ubuntuglibc16.042.21-0ubuntu4vulnerable
Ubuntuglibc16.042.21-0ubuntu5vulnerable
Ubuntuglibc16.042.21-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu1vulnerable
Ubuntuglibc16.042.23-0ubuntu2vulnerable
Ubuntuglibc16.042.23-0ubuntu3vulnerable
Ubuntuglibc16.042.23-0ubuntu4vulnerable
Ubuntuglibc16.042.23-0ubuntu5vulnerable
Ubuntuglibc16.042.23-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu7vulnerable
Ubuntuglibc16.042.23-0ubuntu9fixed
Ubuntueglibc14.042.17-93ubuntu4vulnerable
Ubuntueglibc14.042.18-0ubuntu1vulnerable
Ubuntueglibc14.042.18-0ubuntu2vulnerable
Ubuntueglibc14.042.18-0ubuntu4vulnerable
Ubuntueglibc14.042.18-0ubuntu5vulnerable
Ubuntueglibc14.042.18-0ubuntu6vulnerable
Ubuntueglibc14.042.18-0ubuntu7vulnerable
Ubuntueglibc14.042.19-0ubuntu2vulnerable
Ubuntueglibc14.042.19-0ubuntu3vulnerable
Ubuntueglibc14.042.19-0ubuntu4vulnerable
Ubuntueglibc14.042.19-0ubuntu5vulnerable
Ubuntueglibc14.042.19-0ubuntu6vulnerable
Ubuntueglibc14.042.19-0ubuntu6.1vulnerable
Ubuntueglibc14.042.19-0ubuntu6.3vulnerable
Ubuntueglibc14.042.19-0ubuntu6.4vulnerable
Ubuntueglibc14.042.19-0ubuntu6.5vulnerable
Ubuntueglibc14.042.19-0ubuntu6.6vulnerable
Ubuntueglibc14.042.19-0ubuntu6.7vulnerable
Ubuntueglibc14.042.19-0ubuntu6.8vulnerable
Ubuntueglibc14.042.19-0ubuntu6.9vulnerable
Ubuntueglibc14.042.19-0ubuntu6.10vulnerable
Ubuntueglibc14.042.19-0ubuntu6.11vulnerable
Ubuntueglibc14.042.19-0ubuntu6.13fixed
Ubuntuglibc16.042.21-0ubuntu4vulnerable
Ubuntuglibc16.042.21-0ubuntu5vulnerable
Ubuntuglibc16.042.21-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu1vulnerable
Ubuntuglibc16.042.23-0ubuntu2vulnerable
Ubuntuglibc16.042.23-0ubuntu3vulnerable
Ubuntuglibc16.042.23-0ubuntu4vulnerable
Ubuntuglibc16.042.23-0ubuntu5vulnerable
Ubuntuglibc16.042.23-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu7vulnerable
Ubuntuglibc16.042.23-0ubuntu9fixed
Suseglibcopenstack cloud 62.19-40.6.1fixed
Suseglibclinux enterprise server for sap applications 12 sp12.19-40.6.1fixed
Suseglibclinux enterprise server 12 sp1-ltss2.19-40.6.1fixed
Suseglibclinux enterprise server for sap applications 122.19-22.21.1fixed
Suseglibclinux enterprise server 12-ltss2.19-22.21.1fixed
Suseglibclinux enterprise software development kit 11 sp42.11.3-17.109.1fixed
Suseglibclinux enterprise point of sale 11 sp32.11.3-17.109.1fixed
Suseglibclinux enterprise server 11 sp3-ltss2.11.3-17.109.1fixed
Suseglibclinux enterprise server 11 sp3-teradata2.11.3-17.109.1fixed
Suseglibclinux enterprise server 11 sp42.11.3-17.109.1fixed
Suseglibclinux enterprise server for sap applications 11 sp42.11.3-17.109.1fixed
Suseglibclinux enterprise desktop 12 sp22.22-61.3fixed
Suseglibclinux enterprise server for raspberry pi 12 sp22.22-61.3fixed
Suseglibclinux enterprise software development kit 12 sp22.22-61.3fixed
Suseglibclinux enterprise server 12 sp22.22-61.3fixed
Suseglibclinux enterprise server for sap applications 12 sp22.22-61.3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.24-12not yet assignedNot reportedNot reported
Debianglibcsourceforky2.24-12not yet assignedNot reportedNot reported
Debianglibcsourcetrixie2.24-12not yet assignedNot reportedNot reported
Debianglibcsourcebookworm2.24-12not yet assignedNot reportedNot reported
Ubuntueglibcdeb14.042.19-0ubuntu6.13Not reportedUBUNTU-CVE-2017-1000366Not reported
Ubuntuglibcdeb16.042.23-0ubuntu9Not reportedUBUNTU-CVE-2017-1000366Not reported
Ubuntueglibcdeb14.042.19-0ubuntu6.13Not reportedUSN-3323-1Not reported
Ubuntuglibcdeb16.042.23-0ubuntu9Not reportedUSN-3323-1Not reported
Suseglibcrpmopenstack cloud 62.19-40.6.1Not reportedSUSE-SU-2017:1614-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp12.19-40.6.1Not reportedSUSE-SU-2017:1614-1Not reported
Suseglibcrpmlinux enterprise server 12 sp1-ltss2.19-40.6.1Not reportedSUSE-SU-2017:1614-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 122.19-22.21.1Not reportedSUSE-SU-2017:1611-1Not reported
Suseglibcrpmlinux enterprise server 12-ltss2.19-22.21.1Not reportedSUSE-SU-2017:1611-1Not reported
Suseglibcrpmlinux enterprise software development kit 11 sp42.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise point of sale 11 sp32.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise server 11 sp3-ltss2.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise server 11 sp3-teradata2.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise server 11 sp42.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 11 sp42.11.3-17.109.1Not reportedSUSE-SU-2017:1621-1Not reported
Suseglibcrpmlinux enterprise desktop 12 sp22.22-61.3Not reportedSUSE-SU-2017:1619-1Not reported
Suseglibcrpmlinux enterprise server for raspberry pi 12 sp22.22-61.3Not reportedSUSE-SU-2017:1619-1Not reported
Suseglibcrpmlinux enterprise software development kit 12 sp22.22-61.3Not reportedSUSE-SU-2017:1619-1Not reported
Suseglibcrpmlinux enterprise server 12 sp22.22-61.3Not reportedSUSE-SU-2017:1619-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp22.22-61.3Not reportedSUSE-SU-2017:1619-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [glibc-doc]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-dbg]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-dev]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-i386]Fixed

    Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc6-x32]Fixed

    Source package: [glibc]

    Details (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc-bin]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [libc-l10n]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [locales]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

  • [nscd]Fixed

    Source package: [glibc]

    Details (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · bookworm; dsa · glibc · debian · 12

[Debian 13 (Trixie)]

  • [glibc-doc]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

  • Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

  • [libc6]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

  • [libc6-dbg]Fixed

    Source package: [glibc]

    Details (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Fixed · Fixed: 2.24-12

      dsa · glibc · debian · 13

Next results

Observed:

References