Catalogo CVE

CVE-2021-33574

glibc: CVE-2021-33574

[Catalogo CVE]

Gravità
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published
Source
[NVD] · [CVE record]
EPSS
3.52% · Oct 22, 2026

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4fixed
Debianglibcbookworm2.36-9+deb12u14fixed
Debianglibcbookworm-security2.36-9+deb12u7fixed
CpeglibcNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
Cpecloud_backupNot reportedNot reportedunknown
Cpee-series_santricity_os_controllerNot reportedNot reportedunknown
Cpesolidfire_baseboard_management_controller_firmwareNot reportedNot reportedunknown
Cpeh300s_firmwareNot reportedNot reportedunknown
Cpeh500s_firmwareNot reportedNot reportedunknown
Cpeh700s_firmwareNot reportedNot reportedunknown
Cpeh300e_firmwareNot reportedNot reportedunknown
Cpeh500e_firmwareNot reportedNot reportedunknown
Cpeh700e_firmwareNot reportedNot reportedunknown
Cpeh410s_firmwareNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Ubuntueglibcpro2.17-93ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu1vulnerable
Ubuntueglibcpro2.18-0ubuntu2vulnerable
Ubuntueglibcpro2.18-0ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu5vulnerable
Ubuntueglibcpro2.18-0ubuntu6vulnerable
Ubuntueglibcpro2.18-0ubuntu7vulnerable
Ubuntueglibcpro2.19-0ubuntu2vulnerable
Ubuntueglibcpro2.19-0ubuntu3vulnerable
Ubuntueglibcpro2.19-0ubuntu4vulnerable
Ubuntueglibcpro2.19-0ubuntu5vulnerable
Ubuntueglibcpro2.19-0ubuntu6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.4vulnerable
Ubuntueglibcpro2.19-0ubuntu6.5vulnerable
Ubuntueglibcpro2.19-0ubuntu6.6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.7vulnerable
Ubuntueglibcpro2.19-0ubuntu6.8vulnerable
Ubuntueglibcpro2.19-0ubuntu6.9vulnerable
Ubuntueglibcpro2.19-0ubuntu6.10vulnerable
Ubuntueglibcpro2.19-0ubuntu6.11vulnerable
Ubuntueglibcpro2.19-0ubuntu6.13vulnerable
Ubuntueglibcpro2.19-0ubuntu6.14vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm2vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm4vulnerable
Ubuntuglibcpro2.30-0ubuntu2vulnerable
Ubuntuglibcpro2.30-0ubuntu3vulnerable
Ubuntuglibcpro2.31-0ubuntu5vulnerable
Ubuntuglibcpro2.31-0ubuntu6vulnerable
Ubuntuglibcpro2.31-0ubuntu7vulnerable
Ubuntuglibcpro2.31-0ubuntu9vulnerable
Ubuntuglibcpro2.31-0ubuntu9.1vulnerable
Ubuntuglibcpro2.31-0ubuntu9.2vulnerable
Ubuntuglibcpro2.31-0ubuntu9.3vulnerable
Ubuntuglibcpro2.31-0ubuntu9.7vulnerable
Ubuntuglibcpro2.31-0ubuntu9.9vulnerable
Ubuntuglibcpro2.31-0ubuntu9.12vulnerable
Ubuntuglibcpro2.31-0ubuntu9.14vulnerable
Ubuntuglibcpro2.31-0ubuntu9.15vulnerable
Ubuntuglibcpro2.31-0ubuntu9.16vulnerable
Ubuntuglibcpro2.31-0ubuntu9.17vulnerable
Ubuntuglibcpro2.31-0ubuntu9.18vulnerable
Ubuntuglibcpro2.31-0ubuntu9.18+esm1vulnerable
Suseglibcopenstack cloud 92.22-114.15.1fixed
Suseglibcopenstack cloud crowbar 92.22-114.15.1fixed
Suseglibclinux enterprise server for sap applications 12 sp42.22-114.15.1fixed
Suseglibclinux enterprise software development kit 12 sp52.22-114.15.1fixed
Suseglibclinux enterprise server 12 sp4-ltss2.22-114.15.1fixed
Suseglibclinux enterprise server 12 sp52.22-114.15.1fixed
Suseglibclinux enterprise server for sap applications 12 sp52.22-114.15.1fixed
Suseglibclinux enterprise module for basesystem 15 sp22.26-13.59.1fixed
Suseglibclinux enterprise module for development tools 15 sp22.26-13.59.1fixed
Suseglibclinux enterprise high performance computing 15-espos2.26-13.59.1fixed
Suseglibclinux enterprise high performance computing 15-ltss2.26-13.59.1fixed
Suseglibclinux enterprise high performance computing 15 sp1-espos2.26-13.59.1fixed
Suseglibclinux enterprise high performance computing 15 sp1-ltss2.26-13.59.1fixed
Suseglibclinux enterprise server 15-ltss2.26-13.59.1fixed
Suseglibclinux enterprise server 15 sp1-bcl2.26-13.59.1fixed
Suseglibclinux enterprise server 15 sp1-ltss2.26-13.59.1fixed
Suseglibclinux enterprise server for sap applications 152.26-13.59.1fixed
Suseglibclinux enterprise server for sap applications 15 sp12.26-13.59.1fixed
Suseglibclinux enterprise micro 5.02.26-13.59.1fixed
Suseglibcenterprise storage 62.26-13.59.1fixed
Suseglibclinux enterprise point of sale 11 sp32.11.3-17.110.37.1fixed
Suseglibclinux enterprise server 11 sp4-ltss2.11.3-17.110.37.1fixed
Suseglibclinux enterprise module for basesystem 15 sp32.31-9.3.2fixed
Suseglibclinux enterprise module for development tools 15 sp32.31-9.3.2fixed
Suseglibclinux enterprise micro 5.12.31-9.3.2fixed
Opensuseglibcleap 15.32.31-9.3.2fixed
Opensuseglibcleap 15.22.26-lp152.26.9.1fixed
Opensuseglibc-testsuite-srcleap 15.22.26-lp152.26.9.1fixed
Suseglibchpe helion openstack 82.22-116.1fixed
Suseglibcopenstack cloud 82.22-116.1fixed
Suseglibcopenstack cloud crowbar 82.22-116.1fixed
Suseglibclinux enterprise server for sap applications 12 sp32.22-116.1fixed
Suseglibclinux enterprise server 12 sp2-bcl2.22-116.1fixed
Suseglibclinux enterprise server 12 sp3-ltss2.22-116.1fixed
Suseglibclinux enterprise server 12 sp3-bcl2.22-116.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.32-1not yet assignedNot reported[989147]
Debianglibcsourceforky2.32-1not yet assignedNot reported[989147]
Debianglibcsourcetrixie2.32-1not yet assignedNot reported[989147]
Debianglibcsourcebookworm2.32-1not yet assignedNot reported[989147]
Suseglibcrpmopenstack cloud 92.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmopenstack cloud crowbar 92.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp42.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise software development kit 12 sp52.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise server 12 sp4-ltss2.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise server 12 sp52.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp52.22-114.15.1Not reportedSUSE-SU-2021:3290-1Not reported
Suseglibcrpmlinux enterprise module for basesystem 15 sp22.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise module for development tools 15 sp22.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15-espos2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15-ltss2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp1-espos2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise high performance computing 15 sp1-ltss2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise server 15-ltss2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise server 15 sp1-bcl2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise server 15 sp1-ltss2.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 152.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 15 sp12.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise micro 5.02.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmenterprise storage 62.26-13.59.1Not reportedSUSE-SU-2021:3385-1Not reported
Suseglibcrpmlinux enterprise point of sale 11 sp32.11.3-17.110.37.1Not reportedSUSE-SU-2021:14822-1Not reported
Suseglibcrpmlinux enterprise server 11 sp4-ltss2.11.3-17.110.37.1Not reportedSUSE-SU-2021:14822-1Not reported
Suseglibcrpmlinux enterprise module for basesystem 15 sp32.31-9.3.2Not reportedSUSE-SU-2021:3291-1Not reported
Suseglibcrpmlinux enterprise module for development tools 15 sp32.31-9.3.2Not reportedSUSE-SU-2021:3291-1Not reported
Suseglibcrpmlinux enterprise micro 5.12.31-9.3.2Not reportedSUSE-SU-2021:3291-1Not reported
Opensuseglibcrpmleap 15.32.31-9.3.2Not reportedOPENSUSE-SU-2021:3291-1Not reported
Opensuseglibcrpmleap 15.22.26-lp152.26.9.1Not reportedOPENSUSE-SU-2021:1374-1Not reported
Opensuseglibc-testsuite-srcrpmleap 15.22.26-lp152.26.9.1Not reportedOPENSUSE-SU-2021:1374-1Not reported
Suseglibcrpmhpe helion openstack 82.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmopenstack cloud 82.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmopenstack cloud crowbar 82.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmlinux enterprise server for sap applications 12 sp32.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmlinux enterprise server 12 sp2-bcl2.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmlinux enterprise server 12 sp3-ltss2.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported
Suseglibcrpmlinux enterprise server 12 sp3-bcl2.22-116.1Not reportedSUSE-SU-2021:3289-1Not reported

[Debian bug #989147]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [glibc-doc]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [glibc-source]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-dbg]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-dev]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-dev-i386]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-dev-x32]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-i386]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc6-x32]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc-bin]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc-dev-bin]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc-devtools]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [libc-l10n]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [locales]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [locales-all]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

  • [nscd]Corretta

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Corretta · Corretta: 2.32-1

      dsa · glibc · debian · bookworm

Osservato:

Riferimenti