Red Hat Security AdvisoryRHSA-2018:3092
glibc security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-260.el7, glibc-common-2.17-260.el7, glibc-devel-2.17-260.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-260.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) glibc-2.17-260.el7, glibc-common-2.17-260.el7, glibc-devel-2.17-260.el7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-260.el7
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-260.el7, glibc-2.17-260.el7.ppc, glibc-common-2.17-260.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-260.el7, glibc-static-2.17-260.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-260.el7, glibc-common-2.17-260.el7, glibc-devel-2.17-260.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-260.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) glibc-2.17-260.el7, glibc-common-2.17-260.el7, glibc-devel-2.17-260.el7 +3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) glibc-static-2.17-260.el7
Fixes 4 records
Priority MEDIUM 52
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leadin…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0692 · Published 2018-05-18 · Partial fix CWE-190
Priority MEDIUM 50
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04689 · Published 2018-02-01 · Partial fix CWE-190
Priority LOW 39
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02895 · Published 2017-12-18 · Partial fix CWE-426
Priority LOW 36
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupp…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00874 · Published 2018-05-18 · Fixed CWE-787
THREATIST.IORead the docs