Product by Debian
Glibc
39 known vulnerabilities in Glibc (Debian), 1 of them actively exploited (CISA KEV).
Key figures
39
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEValso in 46 other products | 7.8 | |
| High | CVE-2024-2961 | The GNU C Library Glibc: Out-of-bounds Write | 7.3 | |
| High | CVE-2015-7547 | GNU glibc: Stack-Based Buffer Overflow | 8.1 | |
| Critical | CVE-2015-8779 | GNU glibc: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2015-8778 | GNU glibc: Out-of-Bounds Access | 9.8 | |
| Critical | CVE-2022-23218 | GNU glibc: Buffer Overflow | 9.8 | |
| Critical | CVE-2022-23219 | GNU glibc: Buffer Overflow | 9.8 | |
| High | CVE-2023-6246 | Glibc: heap-based buffer overflow in __vsyslog_internal() | 8.4 | |
| Critical | CVE-2015-8776 | GNU glibc: Information Disclosure | 9.1 | |
| Critical | CVE-2021-33574 | GNU glibc: Use-After-Free | 9.8 | |
| High | CVE-2020-6096 | GNU glibc: Signed to Unsigned Conversion Error | 8.1 | |
| High | CVE-2023-6779 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | 8.2 | |
| Critical | CVE-2021-35942 | GNU glibc: Denial of Service | 9.1 | |
| High | CVE-2021-3326 | GNU glibc: Denial of Service | 7.5 | |
| High | CVE-2017-1000366 | GNU glibc: Code Execution | 7.8 | |
| Medium | CVE-2019-25013 | GNU glibc: Buffer Over-read | 5.9 | |
| Medium | CVE-2023-6780 | Glibc: integer overflow in __vsyslog_internal() | 5.3 | |
| High | CVE-2024-33599 | nscd: Stack-based buffer overflow in netgroup cache | 8.1 | |
| High | CVE-2026-0915 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler | 7.5 | |
| High | CVE-2025-15281 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | 7.5 | |
| Not rated | CVE-2015-0235 | GNU glibc: Heap-Based Buffer Overflow | — | |
| High | CVE-2026-4046 | iconv crash due to assertion failure with untrusted input | 7.5 | |
| Not rated | CVE-2014-5119 | GNU glibc: Denial of Service | — | |
| High | CVE-2024-33601 | nscd: netgroup cache may terminate daemon on memory allocation failure | 7.3 | |
| Medium | CVE-2024-33600 | nscd: Null pointer crashes after notfound response | 5.9 |