Debian/glibc: high 7.8
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
Action: Upgrade glibc to 2.26-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26-4 | - |
Fixed versions
| 2.26-4 |
Sources
- osv: DEBIAN-CVE-2018-1000001#Debian:14/glibc
- https://security-tracker.debian.org/tracker/CVE-2018-1000001
published · modified · JSON