CVE-2026-97399

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://sourceware.org/bugzilla/show_bug.cgi?id=34683
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024
http://www.openwall.com/lists/oss-security/2026/09/28/7

Configurations

No configuration.

History

28 Sep 2026, 18:17

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2026/09/28/7 -

28 Sep 2026, 16:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-28 16:17

Updated : 2026-09-29 21:36

NVD link : CVE-2026-97399

Mitre link : CVE-2026-97399

CVE.ORG link : CVE-2026-97399

JSON object : View

Products Affected

No product.

CWE

CWE-126

Buffer Over-read

{"id": "CVE-2026-97399", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-97399", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-28T15:33:28.320527Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "3ff69d7a-14f2-4f67-a097-88dee7810d18", "affectedData": [{"vendor": "The GNU C Library", "product": "glibc", "versions": [{"status": "affected", "version": "2.24", "lessThan": "2.45", "versionType": "custom"}], "platforms": ["Power8"], "defaultStatus": "unaffected"}]}], "published": "2026-09-28T16:17:18.550", "references": [{"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34683", "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18"}, {"url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024", "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18"}, {"url": "http://www.openwall.com/lists/oss-security/2026/09/28/7", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18", "description": [{"lang": "en", "value": "CWE-126"}]}], "descriptions": [{"lang": "en", "value": "The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable."}], "lastModified": "2026-09-29T21:36:39.547", "sourceIdentifier": "3ff69d7a-14f2-4f67-a097-88dee7810d18"}