[UPDATE] [mittel] GNU libc: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher bezeichnete Angriffe durchzuführen.
CSIRTS triage
- What
- Multiple vulnerabilities in GNU libc enable code execution, information disclosure, denial-of-service, and other attacks.
- Who is affected
- Systems running affected GNU libc versions; unpatched status indicates no fixes currently available.
- Urgency
- Medium priority; fundamental C library vulnerabilities are critical if patched, but current unpatched status indicates long-term monitoring needed.
- Action
- Track GNU libc security updates closely and apply patches from distribution vendors immediately upon release.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch libc
Get an email when a new libc advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3014
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-19499 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-19542 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-77117 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownUSN-8737-2: GNU C Library vulnerabilitiesubuntu
- unknownUSN-8737-1: GNU C Library vulnerabilitiesubuntu
Recent advisories for GNU libc
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- medium[UPDATE] [mittel] GNU libc: Mehrere Schwachstellencert-bund · 2026-09-11
- critical[UPDATE] [kritisch] GNU libc: Mehrere Schwachstellencert-bund · 2026-09-11
- medium[UPDATE] [mittel] GNU libc: Schwachstelle ermöglicht Denial of Servicecert-bund · 2026-09-11
- medium[UPDATE] [mittel] GNU libc: Mehrere Schwachstellen ermöglichen Manipulation von DNS Antwortencert-bund · 2026-09-11
- low[NEU] [UNGEPATCHT] [niedrig] GNU libc: Schwachstelle ermöglicht Denial of Servicecert-bund · 2026-09-11
- medium[UPDATE] [mittel] GNU libc: Schwachstelle ermöglicht Denial of Servicecert-bund · 2026-09-11
More from CERT-Bund (BSI) Security Advisories
- high[UPDATE] [hoch] Red Hat Enterprise Linux (postgis, virtuoso-opensource): Mehrere Schwachstellen2026-09-11
- medium[UPDATE] [mittel] Red Hat Enterprise Linux: Mehrere Schwachstellen2026-09-11
- medium[UPDATE] [mittel] Linux Kernel: Schwachstelle ermöglicht Denial of Service2026-09-11
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-11
- high[UPDATE] [hoch] OpenSSL: Mehrere Schwachstellen2026-09-11