Vulnerability · Published May 16, 2025 · Assigned by glibc

CVE-2025-4802

High 7.8

In plain English

A high-severity security flaw in glibc from The GNU C Library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.6%top 51.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8compat-libpthread-nonshared2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:8glibc2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-all-langpacks2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-all-langpacks2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-benchtests2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-benchtests2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-common2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-common2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-devel2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-devel2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-doc2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-doc2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-gconv-extra2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-gconv-extra2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-headers2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-headers2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-aa2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-aa2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-af2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-af2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-agr2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-agr2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ak2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ak2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-am2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-am2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-an2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-an2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-anp2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-anp2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ar2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ar2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-as2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-as2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ast2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ast2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ayc2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ayc2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-az2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-az2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-be2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-be2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bem2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bem2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ber2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ber2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bg2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bg2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bhb2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bhb2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bho2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bho2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bi2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bi2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bn2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bn2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bo2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bo2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-br2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-br2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-brx2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-brx2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-bs2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-bs2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-byn2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-byn2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ca2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ca2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ce2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ce2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-chr2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-chr2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:9glibc-langpack-ckb2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-cmn2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-cmn2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-crh2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-crh2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-cs2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-cs2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-csb2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-csb2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-cv2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-cv2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-cy2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-cy2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-da2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-da2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-de2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-de2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-doi2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-doi2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-dsb2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-dsb2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-dv2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-dv2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-dz2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-dz2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-el2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-el2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-en2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-en2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-eo2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-eo2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-es2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-es2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-et2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-et2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-eu2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-eu2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fa2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fa2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ff2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ff2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fi2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fi2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fil2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fil2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fo2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fo2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fr2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fr2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fur2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fur2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-fy2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-fy2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ga2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ga2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-gd2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-gd2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-gez2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-gez2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-gl2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-gl2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-gu2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-gu2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-gv2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-gv2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ha2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ha2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hak2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hak2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-he2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-he2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hi2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hi2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hif2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hif2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hne2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hne2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hr2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hr2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hsb2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hsb2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ht2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ht2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hu2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hu2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-hy2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-hy2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ia2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ia2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-id2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-id2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ig2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ig2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ik2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ik2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-is2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-is2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-it2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-it2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-iu2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-iu2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ja2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ja2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ka2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ka2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kab2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kab2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kk2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kk2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kl2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kl2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-km2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-km2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kn2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kn2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ko2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ko2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kok2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kok2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ks2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ks2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ku2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ku2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-kw2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-kw2.34-168.el9_6.19ALSA-2025:8655
AlmaLinux:8glibc-langpack-ky2.28-251.el8_10.22ALSA-2025:8686
AlmaLinux:9glibc-langpack-ky2.34-168.el9_6.19ALSA-2025:8655

Affected products (as reported)

VendorProductVersions
The GNU C Library glibc 2.27 – before 2.39

Weakness: CWE-426 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References