GNU Libc Critical Vulnerabilities, 9.8 CVSS Score
Summary
CERT-Bund has issued a security advisory (WID-SEC-2026-1190) warning of multiple critical vulnerabilities in GNU libc 2.43. The vulnerabilities carry a CVSS Base Score of 9.8 (critical) and a Temporal Score of 9.0. Remote, unauthenticated attackers can exploit the flaws to manipulate files, cause denial of service, or conduct other unspecified attacks. No mitigation measures are currently available.
“Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.”
What changed
CERT-Bund published security advisory WID-SEC-2026-1190 disclosing multiple critical vulnerabilities in GNU libc 2.43, a foundational C library used in Linux and other UNIX-based operating systems. The CVSS Base Score of 9.8 and Temporal Score of 9.0 reflect the highest severity classification, with confirmed remote exploitability and no available workaround at the time of publication.
Organizations running GNU libc on UNIX or Linux systems should monitor for vendor patches and security updates from their distribution maintainers. The absence of mitigation means that once patches are released, priority deployment will be critical given the remote exploitability and severity of potential consequences including file manipulation and denial of service.
Archived snapshot
Apr 21, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
[WID-SEC-2026-1190] GNU libc: Mehrere Schwachstellen CVSS Base Score 9.8 (kritisch) CVSS Temporal Score 9.0 (kritisch) Remoteangriff ja Datum 20.04.2026 Stand 21.04.2026 Mitigation nein
Betroffene Systeme
Betriebssystem
- UNIX
Produktbeschreibung
Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche die Systemaufrufe sowie Basisfunktionalität bereitstellt.
Produkte
20.04.2026
- Open Source GNU libc 2.43
Angriff
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben
Related changes
Get daily alerts for CERT-Bund Security Advisories
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when CERT-Bund Security Advisories publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.