p PatchFirst

CVE-2018-1000001

CVE-2018-1000001

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

CVSS 7.8 · High · EPSS 13.4% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • glibc Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.26-4

    Update to 2.26-4

  • glibc Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.26-4

    Update to 2.26-4

  • glibc Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.26-4

    Update to 2.26-4

  • eglibc Ubuntu:14.04:LTS

    Versions
    • 2.17-93ubuntu4
    • 2.18-0ubuntu1
    • 2.18-0ubuntu2
    • 2.18-0ubuntu4
    • 2.18-0ubuntu5
    • 2.18-0ubuntu6
    • 2.18-0ubuntu7
    • 2.19-0ubuntu2
    • 2.19-0ubuntu3
    • 2.19-0ubuntu4
    • 2.19-0ubuntu5
    • 2.19-0ubuntu6
    • 2.19-0ubuntu6.1
    • 2.19-0ubuntu6.3
    • 2.19-0ubuntu6.4
    • 2.19-0ubuntu6.5
    • 2.19-0ubuntu6.6
    • 2.19-0ubuntu6.7
    • 2.19-0ubuntu6.8
    • 2.19-0ubuntu6.9
    • 2.19-0ubuntu6.10
    • 2.19-0ubuntu6.11
    • 2.19-0ubuntu6.13
    Affected ranges
    • ECOSYSTEM: < 2.19-0ubuntu6.14

    Update to 2.19-0ubuntu6.14

  • musl Ubuntu:Pro:14.04:LTS

    Versions
    • 0.9.14-2
    • 0.9.14-2ubuntu1
    • 0.9.15-1
    Affected ranges
    • ECOSYSTEM: < 0.9.15-1ubuntu0.1~esm1

    Update to 0.9.15-1ubuntu0.1~esm1

  • glibc Ubuntu:16.04:LTS

    Versions
    • 2.21-0ubuntu4
    • 2.21-0ubuntu5
    • 2.21-0ubuntu6
    • 2.23-0ubuntu1
    • 2.23-0ubuntu2
    • 2.23-0ubuntu3
    • 2.23-0ubuntu4
    • 2.23-0ubuntu5
    • 2.23-0ubuntu6
    • 2.23-0ubuntu7
    • 2.23-0ubuntu9
    Affected ranges
    • ECOSYSTEM: < 2.23-0ubuntu10

    Update to 2.23-0ubuntu10

  • musl Ubuntu:Pro:16.04:LTS

    Versions
    • 1.1.9-1
    Affected ranges
    • ECOSYSTEM: < 1.1.9-1ubuntu0.1~esm2

    Update to 1.1.9-1ubuntu0.1~esm2

Original sources

Check your server →