CVE-2018-11237 An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcp...
HighCVSS 7.8
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glibc(Debian:12) | < 2.27-4 | 2.27-4 |
| debian/glibc(Debian:13) | < 2.27-4 | 2.27-4 |
| debian/glibc(Debian:14) | < 2.27-4 | 2.27-4 |
| GNU glibc | <= 2.27 | No fix listed |
| redhat virtualization host | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| oracle communications session border controller | = 8.0.0 | No fix listed |
| oracle communications session border controller | = 8.1.0 | No fix listed |
| oracle communications session border controller | = 8.2.0 | No fix listed |
| oracle enterprise communications broker | = 3.0.0 | No fix listed |
| oracle enterprise communications broker | = 3.1.0 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp element software management | All versions | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 19.10 | No fix listed |
References
- Debian Security Tracker CVE-2018-11237 vendor-advisory
- 104256 broken-link vdb-entry
- RHBA-2019:0327 third-party-advisory vendor-advisory
- RHSA-2018:3092 third-party-advisory vendor-advisory
- security.netapp.com broken-link
- security.netapp.com third-party-advisory
- sourceware.org issue-tracking patch third-party-advisory
- USN-4416-1 third-party-advisory vendor-advisory
- 44750 broken-link exploit third-party-advisory vdb-entry
- www.oracle.com patch third-party-advisory
- bugs.debian.org issue-tracking