PT-2017-3513 · Gnu+5 · Glibc+5

Jakub Wilk · Publicado 2017-10-24 · Atualizado 2024-06-15 · CVE-2018-6485

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc versions 2.26 and earlier

Description The issue is caused by an integer overflow in the implementation of the posix memalign in memalign functions, potentially leading to heap corruption. This could allow a remote attacker to cause a denial of service. The problem is related to a cyclic shift of a pointer, resulting in a memory overflow.

Recommendations For glibc versions 2.26 and earlier, consider updating to a version later than 2.26 to resolve the issue. As a temporary workaround, consider restricting the use of the memalign function until a patch is available. Avoid using the posix memalign function in the affected glibc versions to minimize the risk of exploitation.

Exploit

Correção

Integer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-190

CWE-787

Identificadores relacionados

ALT-PU-2017-2833

BDU:2018-00365

CESA-2018_3092

CVE-2018-6485

MGASA-2018-0159

OPENSUSE-SU-2018_0494-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:3092

RHSA-2018_3092

SUSE-SU-2018:0451-1

SUSE-SU-2018:0565-1

USN-4218-1

USN-4416-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Glibc

Referências · 154

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_realpath_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2018-1000001 · Exploit
• https://lists.centos.org/pipermail/centos-cr-announce/2018-November/005408.html · Nota
• https://bugzilla.suse.com/1037930 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18269 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-6551 · Nota
• https://usn.ubuntu.com/4416-1 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2017-2833 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-1000366 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0451-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-27645 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10792-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5180 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-6485 · Aviso do Fabricante