PT-2017-4268 · Gnu+5 · Gnu C Library+5

Florian Weimer · Published 2017-04-07 · Updated 2024-06-15 · CVE-2017-12132

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.26

Description The issue is related to the DNS stub resolver in the GNU C Library. When EDNS support is enabled, it can solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation. Additionally, there is a memory allocation issue that can be exploited by a remote attacker to impact data integrity.

Recommendations For versions prior to 2.26, update to version 2.26 or later to resolve the issue. As a temporary workaround, consider disabling EDNS support until a patch is available. Restrict access to the DNS stub resolver to minimize the risk of exploitation. Avoid using the affected DNS stub resolver in the GNU C Library until the issue is resolved.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

ALT-PU-2017-2833

BDU:2023-07723

CESA-2018_0805

CVE-2017-12132

MGASA-2017-0464

MGASA-2017-0470

OPENSUSE-SU-2018_0494-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:0805

RHSA-2018_0805

SUSE-SU-2018:0451-1

SUSE-SU-2018:0565-1

SUSE-SU-2018:2185-1

SUSE-SU-2018:2187-1

SUSE-SU-2018_2185-1

USN-5768-1

Affected Products

Alt Linux

Centos

Gnu C Library

Red Hat

Suse

Ubuntu

References · 148

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_realpath_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2018-1000001 · Exploit
• https://advisories.mageia.org/MGASA-2017-0470.html · Security Note
• https://errata.altlinux.org/ALT-PU-2017-2833 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0451-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03123 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10792-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6551 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12132 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15804 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000366 · Security Note
• https://bdu.fstec.ru/vul/2017-02450 · Security Note
• https://bdu.fstec.ru/vul/2020-04683 · Security Note
• https://bdu.fstec.ru/vul/2018-00365 · Security Note