PT-2017-4215 · Gnu+2 · Gnu C Library+2
Florian Weimer
·
Publicado
2017-10-20
·
Atualizado
2019-10-03
·
CVE-2017-15671
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GNU C Library (aka glibc or libc6) versions prior to 2.27
Description
The issue is related to the glob function in the GNU C Library, specifically when invoked with GLOB TILDE and processing the ~ operator with a long user name. This could lead to a denial of service due to a memory leak. The vulnerability can be exploited by a remote attacker to cause a service disruption.
Recommendations
For GNU C Library versions prior to 2.27, update to version 2.27 or later to resolve the issue. As a temporary workaround, consider restricting the use of the glob function with GLOB TILDE to minimize the risk of exploitation.
Exploit
Correção
DoS
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu C Library
Suse