Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian 11: DLA-4143-1 Critical: glibc Buffer Overflow Security Advisory

debian lts
Calendar Grey April 30, 2025
Dist Debian Esm H88
Enhance glibc in Debian LTS to resolve a vital buffer overflow vulnerability detected within the assert() function's implementation.
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian

Summary

When the assertion fails, the implementation does not allocate enough
space for the assertion failure message string and size information,
which may lead to a buffer overflow if the message string size aligns to
page size.

For Debian 11 bullseye, this problem has been fixed in version
2.31-13+deb11u12.

We recommend that you upgrade your glibc packages.

For the detailed security status of glibc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/glibc

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: glibc
Version: 2.31-13+deb11u12
CVE ID: CVE-2025-0395

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here