Integer overflow in GNU C Library (glibc) - CVE-2018-6485
Published: April 5, 2018
Vulnerability identifier: #VU11548
CSH Severity: Low
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-6485
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain elevated privileges on the target system.
The weakness exists in the implementation of the posix_memalign in memalign functions due to integer overflow when causing these functions to return a pointer to a heap area that is too small. A remote attacker can trigger memory corruption and gain root privileges.
The weakness exists in the implementation of the posix_memalign in memalign functions due to integer overflow when causing these functions to return a pointer to a heap area that is too small. A remote attacker can trigger memory corruption and gain root privileges.
Affected software
GNU C Library (glibc)
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
SUSE Linux
Ubuntu
Fedora
Brocade Fabric OS
libc6 (Ubuntu package)
glibc
Red Hat Virtualization Host
Dynamic System Analysis (DSA) Preboot
Integrated Management Module II (IMM2) for BladeCenter Systems
System x Integrated Management Module (IMM2)
Flex System Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
SUSE Linux
Ubuntu
Fedora
Brocade Fabric OS
libc6 (Ubuntu package)
glibc
Red Hat Virtualization Host
Dynamic System Analysis (DSA) Preboot
Integrated Management Module II (IMM2) for BladeCenter Systems
System x Integrated Management Module (IMM2)
Flex System Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)
How to mitigate CVE-2018-6485
Update to version 2.27.
libc6 (Ubuntu package) - addressed in versions 2.15-0ubuntu10.22, 2.19-0ubuntu6.15+esm1, 2.23-0ubuntu11.2, 2.27-3ubuntu1.2, 2.30-0ubuntu2.2
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
glibc - update to 2.26-26.fc27
Brocade Fabric OS - update to 9.1.0
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
glibc - update to 2.26-26.fc27
Brocade Fabric OS - update to 9.1.0
External References
Related Security Bulletins
- Gentoo update for glibc
- SUSE Linux update for glibc
- OpenSUSE Linux update for glibc
- SUSE Linux update for glibc
- Amazon Linux AMI update for glibc
- Red Hat update for glibc
- Ubuntu ESM update for GNU C
- Brocade Fabric OS update for GNU C Library
- Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
- Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
- Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)
- Ubuntu update for glibc
- Fedora 27 update for glibc