CVE-2017-15671

Name of the Vulnerable Software and Affected Versions GNU C Library (aka glibc or libc6) versions prior to 2.27

Description The issue is related to the glob function in the GNU C Library, specifically when invoked with GLOB TILDE and processing the ~ operator with a long user name. This could lead to a denial of service due to a memory leak. The vulnerability can be exploited by a remote attacker to cause a service disruption.

Recommendations For GNU C Library versions prior to 2.27, update to version 2.27 or later to resolve the issue. As a temporary workaround, consider restricting the use of the glob function with GLOB TILDE to minimize the risk of exploitation.