{"schemaVersion":3,"id":"CVE-2026-6791","aliases":["UBUNTU-CVE-2026-6791","DEBIAN-CVE-2026-6791","CGA-2626-cvpg-6hvp","CGA-34vj-r4vm-5h87","CGA-34xj-q3xm-6ppf","CGA-3745-37c5-7c84","CGA-3gjw-822c-cmq5","CGA-4p6x-hxwp-xcpm","CGA-549g-vx73-2w77","CGA-5jjm-wj2g-c623","CGA-63p6-h9gc-5vh7","CGA-68m8-vhh6-jwhm","CGA-6qx5-m28p-4962","CGA-77v8-926c-qjm6","CGA-7q5j-hq96-fgj4","CGA-7wm5-c6r8-x473","CGA-82f2-7p76-qpwf","CGA-8856-9pj7-fx34","CGA-93m8-j4gm-4v3m","CGA-9gf5-grj2-rhmg","CGA-9x9h-jvxh-fx6x","CGA-c26p-9998-hvcc","CGA-c4fw-x452-fw29","CGA-cmqg-c2x6-c6pp","CGA-crpj-gqvw-j4rw","CGA-cwgc-3q39-rppw","CGA-cwx8-8v66-8cpg","CGA-f578-qqcv-r5xw","CGA-fmj8-6mw7-rpqc","CGA-g2f9-fmpr-9gj5","CGA-g6cm-q94g-f2hm","CGA-g89h-47q2-f44p","CGA-gghm-8m38-3m9w","CGA-gr9j-qm6p-wjxf","CGA-h99c-mw33-3m55","CGA-hv38-ph45-6r2r","CGA-j244-28h7-j62m","CGA-j3h4-4749-436m","CGA-jm5w-jhmp-v799","CGA-mcvg-8q6r-f287","CGA-mwqh-xx4p-j9j4","CGA-p25m-h3hp-fwgf","CGA-pg7p-jc78-5qw9","CGA-pgx4-484j-gr4w","CGA-q9rx-85qf-q76x","CGA-qg4j-82q7-g7m3","CGA-qm8f-3vp2-p87g","CGA-qmjv-858x-q8p8","CGA-r3m2-2x26-pw54","CGA-r5p6-xv85-hcw3","CGA-rqq7-x986-wwmv","CGA-vfwv-mf38-r58r","CGA-w25f-6c3m-mxj5","CGA-w5pm-xxhf-2x6x","CGA-wh79-ffqx-jhhm","CGA-xfh5-p964-7vf3","CGA-xpgf-7r52-7mrv","CGA-xwpx-mj8h-c8wm"],"status":"published","duplicateOf":null,"title":null,"description":"When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.","dates":{"published":"2026-08-10T18:41:25.122Z","modified":"2026-08-12T18:01:38.950Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.6,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6.6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":9,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":9,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":9,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":9,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6.6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0022,"percentile":0.11692,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.012000000000000031,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00208},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0022,"percentile":0.11692}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00208,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00331,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0022,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0022,"percentile":0.11692}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-121","name":"Stack-based Buffer Overflow","description":"A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/121.html"}],"affected":[{"vendor":"chainguard","product":"glibc","name":"glibc","label":"glibc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43","name":"glibc-2.43","label":"glibc-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-abi-report","name":"glibc-2.43-abi-report","label":"glibc-2.43-abi-report","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-abi-report","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-dev","name":"glibc-2.43-dev","label":"glibc-2.43-dev","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-dev","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-iconv","name":"glibc-2.43-iconv","label":"glibc-2.43-iconv","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-iconv","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-ca","name":"glibc-2.43-locale-ca","label":"glibc-2.43-locale-ca","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-ca","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-de","name":"glibc-2.43-locale-de","label":"glibc-2.43-locale-de","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-de","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-en","name":"glibc-2.43-locale-en","label":"glibc-2.43-locale-en","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-en","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-es","name":"glibc-2.43-locale-es","label":"glibc-2.43-locale-es","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-es","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-extra","name":"glibc-2.43-locale-extra","label":"glibc-2.43-locale-extra","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-extra","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-fr","name":"glibc-2.43-locale-fr","label":"glibc-2.43-locale-fr","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-fr","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locale-posix","name":"glibc-2.43-locale-posix","label":"glibc-2.43-locale-posix","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locale-posix","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-locales","name":"glibc-2.43-locales","label":"glibc-2.43-locales","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-locales","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-testresults","name":"glibc-2.43-testresults","label":"glibc-2.43-testresults","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-testresults","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"glibc-2.43-tracing","name":"glibc-2.43-tracing","label":"glibc-2.43-tracing","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/glibc-2.43-tracing","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ld-linux-2.43","name":"ld-linux-2.43","label":"ld-linux-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ld-linux-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"libc-bin-2.43","name":"libc-bin-2.43","label":"libc-bin-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/libc-bin-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"libcrypt1-2.43","name":"libcrypt1-2.43","label":"libcrypt1-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/libcrypt1-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"localedef-2.43","name":"localedef-2.43","label":"localedef-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/localedef-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nscd-2.43","name":"nscd-2.43","label":"nscd-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nscd-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nss-db-2.43","name":"nss-db-2.43","label":"nss-db-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nss-db-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nss-hesiod-2.43","name":"nss-hesiod-2.43","label":"nss-hesiod-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nss-hesiod-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pcprofiledump-2.43","name":"pcprofiledump-2.43","label":"pcprofiledump-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pcprofiledump-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"posix-libc-utils-2.43","name":"posix-libc-utils-2.43","label":"posix-libc-utils-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/posix-libc-utils-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"posix-libc-utils-bin-2.43","name":"posix-libc-utils-bin-2.43","label":"posix-libc-utils-bin-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/posix-libc-utils-bin-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sln-2.43","name":"sln-2.43","label":"sln-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sln-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sotruss-2.43","name":"sotruss-2.43","label":"sotruss-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sotruss-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tzutils-2.43","name":"tzutils-2.43","label":"tzutils-2.43","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tzutils-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc","name":"glibc","label":"glibc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43","name":"glibc-2.43","label":"glibc-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-abi-report","name":"glibc-2.43-abi-report","label":"glibc-2.43-abi-report","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-abi-report","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-dev","name":"glibc-2.43-dev","label":"glibc-2.43-dev","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-dev","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-iconv","name":"glibc-2.43-iconv","label":"glibc-2.43-iconv","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-iconv","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-ca","name":"glibc-2.43-locale-ca","label":"glibc-2.43-locale-ca","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-ca","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-de","name":"glibc-2.43-locale-de","label":"glibc-2.43-locale-de","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-de","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-en","name":"glibc-2.43-locale-en","label":"glibc-2.43-locale-en","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-en","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-es","name":"glibc-2.43-locale-es","label":"glibc-2.43-locale-es","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-es","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-extra","name":"glibc-2.43-locale-extra","label":"glibc-2.43-locale-extra","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-extra","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-fr","name":"glibc-2.43-locale-fr","label":"glibc-2.43-locale-fr","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-fr","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locale-posix","name":"glibc-2.43-locale-posix","label":"glibc-2.43-locale-posix","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locale-posix","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-locales","name":"glibc-2.43-locales","label":"glibc-2.43-locales","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-locales","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-testresults","name":"glibc-2.43-testresults","label":"glibc-2.43-testresults","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-testresults","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"glibc-2.43-tracing","name":"glibc-2.43-tracing","label":"glibc-2.43-tracing","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/glibc-2.43-tracing","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ld-linux-2.43","name":"ld-linux-2.43","label":"ld-linux-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ld-linux-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"libc-bin-2.43","name":"libc-bin-2.43","label":"libc-bin-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/libc-bin-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"libcrypt1-2.43","name":"libcrypt1-2.43","label":"libcrypt1-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/libcrypt1-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"localedef-2.43","name":"localedef-2.43","label":"localedef-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/localedef-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nscd-2.43","name":"nscd-2.43","label":"nscd-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nscd-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nss-db-2.43","name":"nss-db-2.43","label":"nss-db-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nss-db-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nss-hesiod-2.43","name":"nss-hesiod-2.43","label":"nss-hesiod-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nss-hesiod-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"pcprofiledump-2.43","name":"pcprofiledump-2.43","label":"pcprofiledump-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pcprofiledump-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"posix-libc-utils-2.43","name":"posix-libc-utils-2.43","label":"posix-libc-utils-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/posix-libc-utils-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"posix-libc-utils-bin-2.43","name":"posix-libc-utils-bin-2.43","label":"posix-libc-utils-bin-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/posix-libc-utils-bin-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sln-2.43","name":"sln-2.43","label":"sln-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sln-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sotruss-2.43","name":"sotruss-2.43","label":"sotruss-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sotruss-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tzutils-2.43","name":"tzutils-2.43","label":"tzutils-2.43","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tzutils-2.43","purlType":"apk","versions":[{"text":"< 2.43-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.43-r10","eol":null,"hubHref":null},{"vendor":"debian","product":"glibc","name":"glibc","label":"glibc","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/glibc","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.43-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.43-3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"eglibc","name":"eglibc","label":"eglibc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/eglibc","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"glibc","name":"glibc","label":"glibc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/glibc","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.35-0ubuntu3.15","noFixRecorded":false,"fixedIn":null},{"text":"< 2.39-0ubuntu8.9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.43-2ubuntu2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.35-0ubuntu3.15 | < 2.39-0ubuntu8.9 | < 2.43-2ubuntu2.4","eol":null,"hubHref":null},{"vendor":"the gnu c library","product":"glibc","name":"glibc","label":"glibc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, ≤ 2.43","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, ≤ 2.43","eol":null,"hubHref":"/vendor/the_gnu_c_library/glibc"}],"affectedCount":60,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34091","label":"sourceware.org/bugzilla/show_bug.cgi?id=34091","hostname":"sourceware.org","tags":["Issue Tracking","REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-6791","label":"ubuntu.com/security/CVE-2026-6791","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6791","label":"www.cve.org/CVERecord?id=CVE-2026-6791","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0013","label":"sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0013","hostname":"sourceware.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8737-1","label":"ubuntu.com/security/notices/USN-8737-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8737-2","label":"ubuntu.com/security/notices/USN-8737-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6791","label":"security-tracker.debian.org/tracker/CVE-2026-6791","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://sourceware.org/glibc/","label":"sourceware.org/glibc/","hostname":"sourceware.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6791.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6791.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6791","label":"nvd.nist.gov/vuln/detail/CVE-2026-6791","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://sourceware.org/git/?p=glibc.git","label":"sourceware.org/git/?p=glibc.git","hostname":"sourceware.org","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["MGASA-2026-0391","OPENSUSE-SU-2026:11660-1","OPENSUSE-SU-2026:21968-1","RHSA-2026:53069","RHSA-2026:76777","RHSA-2026:76781","RHSA-2026:79281","SUSE-SU-2026:23738-1","SUSE-SU-2026:23830-1","SUSE-SU-2026:23929-1","SUSE-SU-2026:23934-1","SUSE-SU-2026:23957-1","SUSE-SU-2026:4204-1","SUSE-SU-2026:4250-1","SUSE-SU-2026:4591-1","USN-8737-1","USN-8737-2"],"duplicates":[],"related":["CGA-CPVJ-JQQ5-26QX","OPENSUSE-SU-2026:11660-1","OPENSUSE-SU-2026:21968-1","SUSE-SU-2026:23738-1","SUSE-SU-2026:23830-1","SUSE-SU-2026:23929-1","SUSE-SU-2026:23934-1","SUSE-SU-2026:23957-1","SUSE-SU-2026:4204-1","SUSE-SU-2026:4250-1","SUSE-SU-2026:4591-1","USN-8737-1","USN-8737-2"]},"timeline":[{"kind":"published","date":"2026-08-10T18:41:25.122Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-12T18:01:38.950Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T03:57:13.791Z","stale":false,"partial":false}}