CVE-2018-11237

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the targe...

Original description

The description as published by the source.

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-11237 glibc Fixed in: 2.27-4

References

advisory access.redhat.com
advisory access.redhat.com
advisory security.netapp.com
advisory security.netapp.com
advisory usn.ubuntu.com
advisory exploit-db.com
patch sourceware.org
patch oracle.com
web securityfocus.com