CVE-2018-11236 stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit a...
CriticalCVSS 9.8
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glibc(Debian:12) | < 2.27-4 | 2.27-4 |
| debian/glibc(Debian:13) | < 2.27-4 | 2.27-4 |
| debian/glibc(Debian:14) | < 2.27-4 | 2.27-4 |
| GNU glibc | <= 2.27 | No fix listed |
| redhat virtualization host | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| oracle communications session border controller | = 8.0.0 | No fix listed |
| oracle communications session border controller | = 8.1.0 | No fix listed |
| oracle communications session border controller | = 8.2.0 | No fix listed |
| oracle enterprise communications broker | = 3.0.0 | No fix listed |
| oracle enterprise communications broker | = 3.1.0 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp element software management | All versions | No fix listed |
References
- Debian Security Tracker CVE-2018-11236 vendor-advisory
- 104255 third-party-advisory vdb-entry
- RHBA-2019:0327 third-party-advisory vendor-advisory
- RHSA-2018:3092 patch third-party-advisory vendor-advisory
- security.netapp.com broken-link
- security.netapp.com third-party-advisory
- sourceware.org issue-tracking third-party-advisory
- sourceware.org
- USN-4416-1 vendor-advisory
- www.oracle.com patch third-party-advisory
- bugs.debian.org issue-tracking