SB2018051109 - Amazon Linux AMI update for glibc
Published: May 11, 2018
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) NULL pointer dereference (CVE-ID: CVE-2015-5180)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in res_query in libresolv due to NULL pointer dereference. A remote attacker can cause the service to crash.
2) Privilege escalation (CVE-ID: CVE-2018-1000001)
The vulnerability allows a local attacker to gain elevated privileges on the target system.The weakness exists in due to a change in the processing of pathnames in the getcwd() command introduced in Linux kernel. A local attacker can use a specially crafted application, trigger buffer underflow in the __realpath() function in 'stdlib/canonicalize.c' and execute arbitrary code with root privileges.
Successful exploitation of the vulnerability may result in system compromise.
3) Infinite loop (CVE-ID: CVE-2014-9402)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists in the nss_dns implementation of getnetbyname due to infinite loop when the DNS backend in the Name Service Switch configuration is enabled. A remote attacker can send a positive answer while a network name is being process and cause the service to crash.
4) Buffer overflow (CVE-ID: CVE-2017-15804)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists in the glob function in glob.c due to buffer overflow during unescaping of user names with the ~ operator. A remote attacker can trigger memory corruption and execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
5) Memory corruption (CVE-ID: CVE-2017-15670)
The vulnerability allows a remote attacker to execute arbitrary code with elevated privileges on the target system.The weakness exists in the glob function in glob.c due to off-by-one error. A remote attacker can trigger heap-based buffer overflow and execute arbitrary code with root privileges.
Successful exploitation of the vulnerability may result in system compromise.
6) Spoofing attack (CVE-ID: CVE-2017-12132)
The vulnerability allows a remote attacker to perform spoofing attack and write arbitrary files on the target system.The weakness exists in the DNS stub resolver due to soliciting large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation, when EDNS support is enabled. A remote attacker can write arbitrary files.
Remediation
Install update from vendor's website.