PT-2018-1052 · Gnu+2 · Glibc+2

Arjun Shankar · Published 2017-12-26 · Updated 2020-08-24 · CVE-2018-6551

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc versions 2.24 through 2.26

Description The issue is related to the malloc implementation in the GNU C Library, which can lead to heap corruption due to improper handling of malloc calls with large arguments. This can cause a denial of service. The problem arises when the malloc function returns a pointer to a heap region that is smaller than requested, potentially leading to memory corruption.

Recommendations For glibc versions 2.24 through 2.26, update to a version that properly handles malloc calls to prevent heap corruption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-787

CWE-119

Related Identifiers

ALT-PU-2017-2833

BDU:2018-00364

CVE-2018-6551

MGASA-2018-0159

OPENSUSE-SU-2018_0494-1

SUSE-SU-2018:0451-1

SUSE-SU-2018:0565-1

Affected Products

Alt Linux

Suse

Glibc

References · 72

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_realpath_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2018-1000001 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15671 · Security Note
• https://bdu.fstec.ru/vul/2022-05948 · Security Note
• https://bdu.fstec.ru/vul/2017-02451 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-2833 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0451-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07723 · Security Note
• https://bdu.fstec.ru/vul/2023-07724 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15670 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-6551 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000001 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-6551 · Vendor Advisory