{"id":"CVE-2017-1000409","details":"A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.","modified":"2026-08-30T14:04:16.139305Z","published":"2018-02-01T04:29:00.310Z","related":["SUSE-SU-2018:0074-1"],"references":[{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190404-0003/"},{"type":"EVIDENCE","url":"http://seclists.org/oss-sec/2017/q4/385"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/43331/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bminor/glibc","events":[{"introduced":"88cc61e84e8e75e6e91b1a2e51147aeb63712ff8"},{"last_affected":"88cc61e84e8e75e6e91b1a2e51147aeb63712ff8"}],"database_specific":{"cpe":"cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.5"},{"last_affected":"2.5"}],"source":"CPE_STRING"}}],"versions":["2.5","glibc-2.5","cvs/glibc-2_5","cvs/fedora-glibc-20060929T2037"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000409.json"}},{"ranges":[{"type":"GIT","repo":"https://sourceware.org/git/glibc.git","events":[{"introduced":"88cc61e84e8e75e6e91b1a2e51147aeb63712ff8"},{"last_affected":"88cc61e84e8e75e6e91b1a2e51147aeb63712ff8"}],"database_specific":{"cpe":"cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.5"},{"last_affected":"2.5"}],"source":"CPE_STRING"}}],"versions":["2.5","glibc-2.5","cvs/glibc-2_5","cvs/fedora-glibc-20060929T2037"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000409.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}