Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-6485

Опубликовано: 01 фев. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 7.5
CVSS3: 9.8

Описание

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

released

2.19-0ubuntu6.15+esm1
esm-infra/focal

DNE

focal

DNE

precise/esm

not-affected

2.15-0ubuntu10.22

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

2.27-3ubuntu1
cosmic

not-affected

2.27-3ubuntu1
devel

not-affected

2.27-3ubuntu1
disco

not-affected

2.27-3ubuntu1
eoan

not-affected

2.27-3ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

2.27-3ubuntu1
esm-infra/focal

not-affected

2.27-3ubuntu1
esm-infra/xenial

released

2.23-0ubuntu11.2

Показывать по

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
около 8 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
nvd
почти 8 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
debian
почти 8 лет назад

An integer overflow in the implementation of the posix_memalign in mem ...

CVSS3: 9.8
github
больше 3 лет назад

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

CVSS3: 9.8
fstec
около 8 лет назад

Уязвимость функции memalign библиотеки, обеспечивающей системные вызовы и основные функции glibc, позволяющая нарушителю вызвать отказ в обслуживании

7.5 High

CVSS2

9.8 Critical

CVSS3