NetSight
IP …
critical9.8

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could …

Impact

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.

Affected products

VendorProductAffected versions
GnuGlibc
through 2.27
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
OracleCommunications Session Border Controller
Versions 8.0.0, 8.1.0, 8.2.0
OracleEnterprise Communications Broker
Versions 3.0.0, 3.1.0
NetappData Ontap Edge
All versions
NetappElement Software Management
All versions

Weakness classification

CWE-190CWE-787

References