CVE-2026-97399: falha de baixa gravidade em The GNU C Library glibc
One-byte overread in strncasecmp on Power8
Publicada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.3%
probabilidade de exploração
0.3%top 80% das CVEs
exploração observada
nãonenhuma fonte reporta
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.
This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
The GNU C Library · glibcCVEs relacionadas — The GNU C Library glibc
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2961HIGHCVE-2024-2961EPSS 88.3%CVE-2024-33599HIGHnscd: Stack-based buffer overflow in netgroup cacheEPSS 1.3%CVE-2024-33600MEDIUMnscd: Null pointer crashes after notfound responseEPSS 1.2%CVE-2024-33601HIGHnscd: netgroup cache may terminate daemon on memory allocation failureEPSS 1.1%CVE-2026-5450CRITICALscanf %mc off-by-one heap buffer overflowEPSS 0.7%CVE-2026-4046HIGHiconv crash due to assertion failure with untrusted inputEPSS 0.7%