CVE-2018-1000001
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading t...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2018-1000001 glibc Corrigé dans: 2.26-4
Références
- advisory seclists.org
- advisory securityfocus.com
- advisory securitytracker.com
- advisory access.redhat.com
- advisory security.netapp.com
- advisory usn.ubuntu.com
- advisory usn.ubuntu.com
- advisory halfdog.net
- report exploit-db.com
- report exploit-db.com