DeutschShown in its original language — a full translation is planned for a future version.
GNU libc: Mehrere Schwachstellen
view advisory published 2018-01-14
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes oder mit administrative Privilegien auszuführen oder einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-1000409US | high7.0 | Exploit | ||
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are n… | ||||
| CVE-2017-1000408US | high7.8 | Exploit | ||
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not… | ||||
| CVE-2017-16997US | high7.8 | Exploit | ||
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allo… | ||||
| CVE-2014-9984US | critical9.8 | — | ||
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-3092 vom 2018-11-06external
- Oracle Linux Security Advisory ELSA-2018-4266 vom 2018-11-07external
- Ubuntu Security Notice USN-3534-1 vom 2018-01-17external
- Red Hat Security Advisory RHSA-2018:3092 vom 2018-10-31external
- NetApp Security Advisory NTAP-20190404-0003 vom 2019-04-04external
- HPE SECURITY BULLETIN HPESBST04367 rev.1 vom 2022-09-21external
- Ubuntu Security Notice USN-6762-1 vom 2024-05-02external
- WID-SEC-W-2022-1478 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan