CVE-2018-1000001

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

13.37%

Published

Jan 31, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (3)

All weaponized →

Exploit-DBglibc - 'realpath()' Privilege Escalation (Metasploit)Exploit-DBglibc < 2.26 - 'getcwd()' Local Privilege Escalation TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

Weaknesses (CWE)

CWE-787

Affected Products (12)

gnu · glibcvulnerable

canonical · ubuntu_linuxvulnerable

redhat · virtualization_hostvulnerable

redhat · enterprise_linux_desktopvulnerable

redhat · enterprise_linux_servervulnerable

redhat · enterprise_linux_server_ausvulnerable

redhat · enterprise_linux_server_eusvulnerable

redhat · enterprise_linux_server_tusvulnerable

redhat · enterprise_linux_workstationvulnerable

References (20)

http://seclists.org/oss-sec/2018/q1/38

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/102525

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040162

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:0805

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190404-0003/

https://usn.ubuntu.com/3534-1/

Third Party Advisory

https://usn.ubuntu.com/3536-1/

Third Party Advisory

https://www.exploit-db.com/exploits/43775/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/44889/

ExploitThird Party AdvisoryVDB Entry

https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/

Third Party Advisory

http://seclists.org/oss-sec/2018/q1/38

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/102525

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040162

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:0805

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190404-0003/

https://usn.ubuntu.com/3534-1/

Third Party Advisory

https://usn.ubuntu.com/3536-1/

Third Party Advisory

https://www.exploit-db.com/exploits/43775/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/44889/

ExploitThird Party AdvisoryVDB Entry

https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs