CVE-2018-1000001
PoC ×2—CVSS 3.0
7.8 high
EPSS
13%p96
Published
()
Modified
Description
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
- Vendors
- gnucanonicalredhat
- Products
- glibc, ubuntu linux, virtualization host, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation
- Weakness
- CWE-787
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.