ECHO-8eae-a1ae-5790
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-8eae-a1ae-5790.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-8eae-a1ae-5790
- Upstream
- CVE-2026-97399
- Withdrawn
- 2026-09-29T11:00:03Z
- Published
- 2026-09-29T01:11:41Z
- Modified
- 2026-09-29T11:45:37Z
- Summary
- The one-byte over-read is in the POWER8-optimised strncasecmp (GLIBC-SA-2026-0024). Echo builds glibc exclusively for amd64 and arm64, whose strncasecmp implementations are separate and unaffected, so the vulnerable code is not compiled into any shipped package. https://security-tracker.debian.org/tracker/CVE-2026-97399
- Details
- References