CVE-2017-17426
- Source
- https://cve.org/CVERecord?id=CVE-2017-17426
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17426.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-17426
- Downstream
- Related
- Published
- 2017-12-05T17:29:00.940Z
- Modified
- 2026-07-08T11:49:22.605474Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
- References
Affected packages
Git / github.com/bminor/glibc
Git / sourceware.org/git/glibc.git
Affected ranges
- Type
- GIT
- Repo
- https://sourceware.org/git/glibc.git
- Events
-
Introduced1c9a5c270d8b66f30dcfaf1cb2d6cf39d3e18369Last affected1c9a5c270d8b66f30dcfaf1cb2d6cf39d3e18369
- Database specific
{ "source": "CPE_STRING", "cpe": "cpe:2.3:a:gnu:glibc:2.26:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "2.26" }, { "last_affected": "2.26" } ] }