Spoofing attack in GNU C Library (glibc) - CVE-2017-12132

Vulnerability identifier: #VU12270

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-12132

CWE-ID: CWE-451

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform spoofing attack and write arbitrary files on the target system.

The weakness exists in the DNS stub resolver due to soliciting large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation, when EDNS support is enabled. A remote attacker can write arbitrary files.

GNU C Library (glibc)
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
SUSE Linux
Ubuntu
Fedora
Isolation Segment
VMware Tanzu Application Service for VMs
Red Hat Virtualization Host
libc6 (Ubuntu package)
glibc
Dynamic System Analysis (DSA) Preboot
Integrated Management Module II (IMM2) for BladeCenter Systems
Tanzu Greenplum for Kubernetes
System x Integrated Management Module (IMM2)
Flex System Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)
VMware Tanzu Operations Manager

Update to version 2.26.

libc6 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
Tanzu Greenplum for Kubernetes - update to 2.0.0
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
VMware Tanzu Operations Manager - update to 2.10.52
glibc - update to 2.25-8.fc26

• https://sourceware.org/bugzilla/show_bug.cgi?id=21361

• SUSE Linux update for glibc
• OpenSUSE Linux update for glibc
• SUSE Linux update for glibc
• Amazon Linux AMI update for glibc
• Red Hat update for glibc
• Ubuntu update for glibc
• VMware Tanzu products update for GNU C Library
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)
• Fedora 26 update for glibc