SB2018030134 - Fedora 27 update for glibc
Published: March 1, 2018 Updated: April 24, 2025
Security Bulletin ID
SB2018030134
Severity
Low
Patch available
YES
Number of vulnerabilities
2
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 secuirty vulnerabilities.
1) Integer overflow (CVE-ID: CVE-2018-6485)
The vulnerability allows a remote attacker to gain elevated privileges on the target system.The weakness exists in the implementation of the posix_memalign in memalign functions due to integer overflow when causing these functions to return a pointer to a heap area that is too small. A remote attacker can trigger memory corruption and gain root privileges.
2) Integer overflow (CVE-ID: CVE-2018-6551)
The vulnerability allows a remote attacker to gain elevated privileges on the target system.The weakness exists in the malloc implementation due to improper handling of malloc calls with arguments close to SIZE_MAX and returning a pointer to a heap region that is smaller than requested. A remote attacker can gain root privileges.
Remediation
Install update from vendor's website.