CVE-2017-1000408

PoC ×2—

CVSS 3.0

7.8 high

EPSS

1%p72

Published

Feb 1, 2018 (Feb 1, 2018)

Modified

Jun 17, 2026

Description

A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.

Vendors: gnu
Products: glibc
Weakness: CWE-772
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.