PT-2017-4268 · Gnu+5 · Gnu C Library+5

Florian Weimer · Publicado 2017-04-07 · Atualizado 2024-06-15 · CVE-2017-12132

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.26

Description The issue is related to the DNS stub resolver in the GNU C Library. When EDNS support is enabled, it can solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation. Additionally, there is a memory allocation issue that can be exploited by a remote attacker to impact data integrity.

Recommendations For versions prior to 2.26, update to version 2.26 or later to resolve the issue. As a temporary workaround, consider disabling EDNS support until a patch is available. Restrict access to the DNS stub resolver to minimize the risk of exploitation. Avoid using the affected DNS stub resolver in the GNU C Library until the issue is resolved.

Exploit

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

ALT-PU-2017-2833

BDU:2023-07723

CESA-2018_0805

CVE-2017-12132

MGASA-2017-0464

MGASA-2017-0470

OPENSUSE-SU-2018_0494-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:0805

RHSA-2018_0805

SUSE-SU-2018:0451-1

SUSE-SU-2018:0565-1

SUSE-SU-2018:2185-1

SUSE-SU-2018:2187-1

SUSE-SU-2018_2185-1

USN-5768-1

Produtos afetados

Alt Linux

Centos

Gnu C Library

Red Hat

Suse

Ubuntu

Referências · 148

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_realpath_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2018-1000001 · Exploit
• https://access.redhat.com/security/cve/CVE-2017-15804 · Nota
• https://bugzilla.suse.com/1037930 · Nota
• https://bugzilla.suse.com/1064580 · Nota
• https://suse.com/security/cve/CVE-2018-6551 · Nota
• http://securityfocus.com/bid/100598 · Nota
• https://advisories.mageia.org/MGASA-2017-0470.html · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2017-2833 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-1000366 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=21582 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0451-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-03123 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-27645 · Nota