Red Hat Security AdvisoryRHSA-2017:1481
glibc security update
Released 2017-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-157.el7_3.4, glibc-common-2.17-157.el7_3.4, glibc-devel-2.17-157.el7_3.4 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-157.el7_3.4
- Red Hat Enterprise Linux ComputeNode (v. 7) glibc-2.17-157.el7_3.4, glibc-common-2.17-157.el7_3.4, glibc-devel-2.17-157.el7_3.4 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-157.el7_3.4
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-157.el7_3.4, glibc-2.17-157.el7_3.4.ppc, glibc-common-2.17-157.el7_3.4 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-157.el7_3.4, glibc-static-2.17-157.el7_3.4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-157.el7_3.4, glibc-common-2.17-157.el7_3.4, glibc-devel-2.17-157.el7_3.4 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-157.el7_3.4
Fixes 1 record
Priority LOW 39
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02733 · Published 2017-06-19 · Partial fix CWE-119
