Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-1000001 →

DEBIAN-CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading t...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-4"}]}]

Debian:13 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-4"}]}]

Debian:14 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-4"}]}]

Références

advisory security-tracker.debian.org