PT-2018-2775 · Gnu+5 · Glibc+5

Published 2018-02-04 · Updated 2024-11-20 · CVE-2018-11236

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions glibc versions 2.27 and earlier

Description The issue is caused by an integer overflow in the mempcpy function of the glibc library, which provides system calls and basic functions. This overflow can occur when processing very long pathname arguments to the realpath function on 32-bit architectures, potentially leading to a stack-based buffer overflow and arbitrary code execution.

Recommendations For glibc versions 2.27 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of very long pathname arguments to the realpath function to minimize the risk of overflow. Avoid using the realpath function with untrusted input until the issue is resolved.

Exploit

Fix

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

ALT-PU-2019-3114

BDU:2019-01773

BDU:2024-09951

CESA-2018_3092

CVE-2018-11236

MGASA-2018-0293

OPENSUSE-SU-2018_1600-1

OPENSUSE-SU-2018_2159-1

OPENSUSE-SU-2024:10792-1

RHSA-2018:3092

RHSA-2018_3092

SUSE-SU-2018:1562-1

SUSE-SU-2018:1562-2

SUSE-SU-2018:1991-1

SUSE-SU-2018:2185-1

SUSE-SU-2018:2187-1

SUSE-SU-2018:2302-1

SUSE-SU-2018_2302-1

USN-4416-1

USN-6762-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Glibc

References · 116

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb · Exploit
• 🔥 https://github.com/ambionics/cnext-exploits · Exploit
• 🔥 https://github.com/rvizx/CVE-2024-2961 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-1751 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6762-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2185-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11236 · Security Note
• https://ubuntu.com/security/CVE-2024-2961 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-11236 · Security Note
• https://ubuntu.com/security/notices/USN-4416-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-10029 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-11236 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0293.html · Security Note