VDB

RHSA-2024%3A3344

RHSA-2024%3A3344 PUBLISHED CVSS 7.599999904632568 HIGH

Record from OSV · Published September 14, 2024

Red Hat Security Advisory: glibc security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
glibc-langpack-itRed Hat:enterprise_linux:8::crb2.28-251.el8, 0:2.28-251.el8_10.2
glibc-headersRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-nhnRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-ttRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-ndsRed Hat:enterprise_linux:8::crb2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-viRed Hat:enterprise_linux:8::crb2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-ceRed Hat:enterprise_linux:8::crb2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-lvRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-veRed Hat:enterprise_linux:8::baseos2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-trRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-hyRed Hat:enterprise_linux:8::appstream2.28-251.el8, 0:2.28-251.el8_10.2
glibc-langpack-omRed Hat:enterprise_linux:8::baseos2.28-251.el8, 0:2.28-251.el8_10.2

88 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
7.599999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

VendorProductVersions
Red Hat:enterprise_linux:8::crbglibc-langpack-it0, 0
Red Hat:enterprise_linux:8::appstreamglibc-headers0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-nhn0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-tt0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-nds0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-vi0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-ce0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-lv0, 0
Red Hat:enterprise_linux:8::baseosglibc-langpack-ve0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-tr0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-hy0, 0
Red Hat:enterprise_linux:8::baseosglibc-langpack-om0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-hy0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-ka0, 0
Red Hat:enterprise_linux:8::baseoslibnsl-debuginfo0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-lo0, 0
Red Hat:enterprise_linux:8::appstreamglibc-langpack-th0, 0
Red Hat:enterprise_linux:8::baseosglibc-devel0, 0
Red Hat:enterprise_linux:8::baseosglibc-langpack-ks0, 0
Red Hat:enterprise_linux:8::crbglibc-langpack-fy0, 0

…and 655 more

Timeline

  • Sep 14, 2024 CVE Published
  • May 1, 2026 CVE Updated
  • May 1, 2026 Distribution Patch (2 in total, the first dated here)
  • May 1, 2026 Security Advisory (5 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2024%3A3344
vulnetix vdb fixes RHSA-2024%3A3344

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2024%253A3344/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›