ISOMAN

CVE

CVE-2018-11237

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://www.securityfocus.com/bid/104256
  2. https://access.redhat.com/errata/RHBA-2019:0327
  3. https://access.redhat.com/errata/RHSA-2018:3092
  4. https://security.netapp.com/advisory/ntap-20190329-0001/
  5. https://security.netapp.com/advisory/ntap-20190401-0001/
  6. https://sourceware.org/bugzilla/show_bug.cgi?id=23196
  7. https://usn.ubuntu.com/4416-1/
  8. https://www.exploit-db.com/exploits/44750/
  9. https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
  10. http://www.securityfocus.com/bid/104256
  11. https://access.redhat.com/errata/RHBA-2019:0327
  12. https://access.redhat.com/errata/RHSA-2018:3092
  13. https://security.netapp.com/advisory/ntap-20190329-0001/
  14. https://security.netapp.com/advisory/ntap-20190401-0001/
  15. https://sourceware.org/bugzilla/show_bug.cgi?id=23196
  16. https://usn.ubuntu.com/4416-1/
  17. https://www.exploit-db.com/exploits/44750/
  18. https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html