Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-6485

Опубликовано: 01 фев. 2018
Источник: debian
EPSS Низкий

Описание

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
glibcfixed2.26.9000+20180127.7e23a7dd-0experimental0experimentalpackage
glibcfixed2.27-1package
eglibcremovedpackage
eglibcignoredwheezypackage

Примечания

  • https://sourceware.org/bugzilla/show_bug.cgi?id=22343

  • https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=8e448310d74b283c5cd02b9ed7fb997b47bf9b22

EPSS

Процентиль: 79%
0.01237
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 8 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 5.3
redhat
около 8 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
nvd
почти 8 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
github
больше 3 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
fstec
около 8 лет назад

Уязвимость функции memalign библиотеки, обеспечивающей системные вызовы и основные функции glibc, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 79%
0.01237
Низкий