PT-2017-3513 · Gnu+5 · Glibc+5

Jakub Wilk · Published 2017-10-24 · Updated 2024-06-15 · CVE-2018-6485

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc versions 2.26 and earlier

Description The issue is caused by an integer overflow in the implementation of the posix memalign in memalign functions, potentially leading to heap corruption. This could allow a remote attacker to cause a denial of service. The problem is related to a cyclic shift of a pointer, resulting in a memory overflow.

Recommendations For glibc versions 2.26 and earlier, consider updating to a version later than 2.26 to resolve the issue. As a temporary workaround, consider restricting the use of the memalign function until a patch is available. Avoid using the posix memalign function in the affected glibc versions to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

ALT-PU-2017-2833

BDU:2018-00365

CESA-2018_3092

CVE-2018-6485

MGASA-2018-0159

OPENSUSE-SU-2018_0494-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:3092

RHSA-2018_3092

SUSE-SU-2018:0451-1

SUSE-SU-2018:0565-1

USN-4218-1

USN-4416-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Glibc

References · 154

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_realpath_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2018-1000001 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18269 · Security Note
• https://usn.ubuntu.com/4416-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-2833 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0451-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10792-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-6485 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-11237 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4218-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11236 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15804 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366 · Security Note