CVE-2025-4802: gnu glibc Untrusted Search Path

CVSS: 7.8v3.1HighModified

AliasesMGASA-2025-0164SUSE-SU-2025:01702-1SUSE-SU-2025:01702-2+13 more

Published 16-05-2025Last modified 26-02-2026

Vulnerability summary

CVE-2025-4802 is a high (CVSS 7.8) Untrusted Search Path vulnerability in gnu glibc. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

41/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.59%

0%100%

Low · +0.04 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2025:15222-1

Timeline

16-05-2025
PublishedVulnerability first disclosed.
26-02-2026
Last modifiedVulnerability information updated.

Description

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

CVSS metrics

5 scores · 5 sources · 1 version

v3.17.8

EPSS trend

Probability

0.59%

Chance of exploitation in the next 30 days

Percentile

47%

Versus all other CVEs

30-day change

+0.04 pp

From 0.56% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-426Untrusted Search PathThe product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Affected systems

Redhat194 products

compat-libpthread-nonshared< 0:2.28-251.el8_10.22
glibc< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3 | < 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-all-langpacks< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-all-langpacks-debuginfo< 0:2.28-251.el8_10.22
glibc-benchtests< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12

glibc-benchtests-debuginfo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-common< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3 | < 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-common-debuginfo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-debuginfo< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3 | < 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-debuginfo-common< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3
glibc-debugsource< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-devel< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3 | < 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-doc< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-gconv-extra< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-gconv-extra-debuginfo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-headers< 0:2.17-326.el7_9.5 | < 0:2.17-292.el7_7.3 | < 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-aa< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-af< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-agr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ak< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-am< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-an< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-anp< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ar< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-as< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ast< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ayc< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-az< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-be< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bem< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ber< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bg< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bhb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bho< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-br< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-brx< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-bs< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-byn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ca< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ce< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-chr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ckb< 0:2.34-168.el9_6.19 | < 0:2.34-100.el9_4.12
glibc-langpack-cmn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-crh< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-cs< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-csb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-cv< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-cy< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-da< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-de< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-doi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-dsb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-dv< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-dz< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-el< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-en< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-eo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-es< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-et< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-eu< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fa< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ff< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fil< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fur< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-fy< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ga< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-gd< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-gez< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-gl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-gu< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-gv< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ha< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hak< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-he< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hif< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hne< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hsb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ht< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hu< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-hy< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ia< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-id< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ig< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ik< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-is< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-it< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-iu< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ja< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ka< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kab< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kk< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-km< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ko< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kok< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ks< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ku< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-kw< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ky< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lg< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-li< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lij< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ln< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lo< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lt< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lv< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-lzh< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mag< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mai< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mfe< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mg< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mhr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-miq< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mjw< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mk< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ml< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mni< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mnw< 0:2.34-168.el9_6.19 | < 0:2.34-100.el9_4.12
glibc-langpack-mr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ms< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-mt< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-my< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nan< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nb< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nds< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ne< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nhn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-niu< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-nso< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-oc< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-om< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-or< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-os< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-pa< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-pap< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-pl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ps< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-pt< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-quz< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-raj< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ro< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ru< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-rw< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sa< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sah< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sat< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sc< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sd< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-se< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sgs< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-shn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-shs< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-si< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sid< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sk< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sm< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-so< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sq< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ss< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-st< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sv< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-sw< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-szl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ta< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tcy< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-te< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tg< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-th< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-the< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-ti< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tig< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tk< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tl< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tn< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-to< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tpi< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12
glibc-langpack-tr< 0:2.34-168.el9_6.19 | < 0:2.28-251.el8_10.22 | < 0:2.34-100.el9_4.12

Show all 194

Opensuse2 products

glibc&distro=openSUSE Leap 15.6< 2.38-150600.14.32.1
kumactl&distro=openSUSE Tumbleweed< 2.12.3-1.1

Debian1 product

glibc< 2.36-9+deb12u11 | < 2.39-4 | < 2.31-13+deb11u13

Gnu1 product

glibc≥ 2.27, ≤ 2.38

Mageia1 product

glibc< 2.36-56.mga9

Ubuntu1 product

glibc< 2.27-3ubuntu1.6+esm5 | < 2.31-0ubuntu9.18 | < 2.35-0ubuntu3.10

6 vendors · 200 products · Showing 200 of 260. Use Open JSON for the complete list.

References

41 links

sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380eREPORTPatch
sourceware.org/bugzilla/show_bug.cgi?id=32976ARTICLEREPORTIssue Tracking
www.openwall.com/lists/oss-security/2025/05/16/7REPORTMailing List
www.openwall.com/lists/oss-security/2025/05/17/2ExploitMailing List
lists.debian.org/debian-lts-announce/2025/05/msg00033.html
advisories.mageia.org/MGASA-2025-0164.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=34286REPORT
www.openwall.com/lists/oss-security/2025/05/16/7WEBARTICLE
www.openwall.com/lists/oss-security/2025/05/17/2WEBARTICLEREPORT
www.suse.com/support/update/announcement/2025/suse-su-202501702-1/Advisory

Show all 41 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities