PT-2018-2775 · Gnu+5 · Glibc+5

CVE-2018-11236 · Publicado 2018-02-04 · Atualizado 2024-11-20

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions glibc versions 2.27 and earlier

Description The issue is caused by an integer overflow in the mempcpy function of the glibc library, which provides system calls and basic functions. This overflow can occur when processing very long pathname arguments to the realpath function on 32-bit architectures, potentially leading to a stack-based buffer overflow and arbitrary code execution.

Recommendations For glibc versions 2.27 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of very long pathname arguments to the realpath function to minimize the risk of overflow. Avoid using the realpath function with untrusted input until the issue is resolved.

Exploit

Correção

Integer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-190

CWE-787

Identificadores relacionados

ALT-PU-2019-3114

BDU:2019-01773

BDU:2024-09951

CESA-2018_3092

CVE-2018-11236

MGASA-2018-0293

OPENSUSE-SU-2018_1600-1

OPENSUSE-SU-2018_2159-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:3092

RHSA-2018_3092

SUSE-SU-2018:1562-1

SUSE-SU-2018:1562-2

SUSE-SU-2018:1991-1

SUSE-SU-2018:2185-1

SUSE-SU-2018:2187-1

SUSE-SU-2018:2302-1

SUSE-SU-2018_2302-1

USN-4416-1

USN-6762-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Glibc

Referências · 116

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb · Exploit
• 🔥 https://github.com/ambionics/cnext-exploits · Exploit
• 🔥 https://github.com/rvizx/CVE-2024-2961 · Exploit
• https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv · Nota
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-11236 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-29562 · Nota
• https://ubuntu.com/security/CVE-2020-1751 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6762-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-15671 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:2185-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1094154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11236 · Nota de Segurança
• https://ubuntu.com/security/CVE-2024-2961 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-11236 · Nota de Segurança