high7.8
CVE-2018-11237
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer,…
Impact
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Glibc | through 2.27 |
| Redhat | Virtualization Host | Version 4.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
| Oracle | Communications Session Border Controller | Versions 8.0.0, 8.1.0, 8.2.0 |
| Oracle | Enterprise Communications Broker | Versions 3.0.0, 3.1.0 |
| Netapp | Data Ontap Edge | All versions |
| Netapp | Element Software Management | All versions |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 19.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104256
- https://access.redhat.com/errata/RHBA-2019:0327
- https://access.redhat.com/errata/RHSA-2018:3092
- https://security.netapp.com/advisory/ntap-20190329-0001/
- https://security.netapp.com/advisory/ntap-20190401-0001/
- https://sourceware.org/bugzilla/show_bug.cgi?id=23196
- https://usn.ubuntu.com/4416-1/
- https://www.exploit-db.com/exploits/44750/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- http://www.securityfocus.com/bid/104256
- https://access.redhat.com/errata/RHBA-2019:0327
- https://access.redhat.com/errata/RHSA-2018:3092
- https://security.netapp.com/advisory/ntap-20190329-0001/
- https://security.netapp.com/advisory/ntap-20190401-0001/
- https://sourceware.org/bugzilla/show_bug.cgi?id=23196
- https://usn.ubuntu.com/4416-1/
- https://www.exploit-db.com/exploits/44750/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html