CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

Link	Resource
https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/	Third Party Advisory
http://seclists.org/oss-sec/2018/q1/38	Mailing List Third Party Advisory
https://www.exploit-db.com/exploits/43775/	Exploit Third Party Advisory
http://www.securitytracker.com/id/1040162	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/102525	Third Party Advisory VDB Entry
https://usn.ubuntu.com/3536-1/	Third Party Advisory
https://usn.ubuntu.com/3534-1/	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0805	Third Party Advisory
https://www.exploit-db.com/exploits/44889/	Exploit Third Party Advisory
https://security.netapp.com/advisory/ntap-20190404-0003/

Configuration 1

cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

---

Published : 2018-01-31 02:29

Updated : 2019-10-03 12:03

---

NVD link : CVE-2018-1000001

Mitre link : CVE-2018-1000001

No products.

CWE-787