CVE-2017-15804

Critical

Published: 22/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The glob function in the GNU C Library (glibc) before version 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.

Risk Assessment

Exploitation of this vulnerability may lead to arbitrary code execution, posing a significant security risk to the system.

Recommendation

It is recommended to update the glibc library to version 2.27 or later to mitigate this vulnerability.

Original NVD description (English source)

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.