CVE-2018-11236
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath functio...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2018-11236 glibc Corrigé dans: 2.27-4
Références
- advisory securityfocus.com
- advisory access.redhat.com
- advisory security.netapp.com
- advisory security.netapp.com
- patch access.redhat.com
- patch oracle.com
- report sourceware.org
- web sourceware.org
- web usn.ubuntu.com