Vulnerability Description
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Glibc | <= 2.26 |
| Canonical | Ubuntu Linux | 12.04 |
| Redhat | Virtualization Host | 4.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.6 |
| Redhat | Enterprise Linux Server Eus | 7.6 |
| Redhat | Enterprise Linux Server Tus | 7.6 |
| Redhat | Enterprise Linux Workstation | 7.0 |
Related Weaknesses (CWE)
References
- http://seclists.org/oss-sec/2018/q1/38Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/102525Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040162Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:0805Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190404-0003/
- https://usn.ubuntu.com/3534-1/Third Party Advisory
- https://usn.ubuntu.com/3536-1/Third Party Advisory
- https://www.exploit-db.com/exploits/43775/ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/44889/ExploitThird Party AdvisoryVDB Entry
- https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/Third Party Advisory
- http://seclists.org/oss-sec/2018/q1/38Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/102525Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040162Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:0805Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190404-0003/
FAQ
What is CVE-2018-1000001?
CVE-2018-1000001 is a vulnerability with a CVSS score of 7.8 (HIGH). In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
How severe is CVE-2018-1000001?
CVE-2018-1000001 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-1000001?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Glibc, Canonical Ubuntu Linux, Redhat Virtualization Host, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server.