CVE-2017-15671

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when…

published October 20, 2017

CVSS
—
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of service (memory leak).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01431 · 72.8th percentile
Published
2017-10-20T17:00Z
EPSS history
Timeline
  • 20 OCT 17:00Z
    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when…
    cvelistv5