High severity7.0NVD Advisory· Published Feb 1, 2018· Updated Jun 17, 2026
CVE-2017-1000409
CVE-2017-1000409
Description
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- osv-coords9 versionspkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 2.22-62.3.4+ 8 more
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
- (no CPE)range: < 2.22-62.3.4
Patches
Vulnerability mechanics
References
3- seclists.org/oss-sec/2017/q4/385nvdExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/43331/nvdExploitThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20190404-0003/nvd
News mentions
0No linked articles in our index yet.