Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1000001

Fixed in a distro release EPSS 13%

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

Published 2018-01-31 · CVE record · OSV

Products: gnu glibc, canonical ubuntu_linux, redhat virtualization_host, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Arch Linuxglibc2.26-11
Arch Linuxlib32-glibc2.26-11
Debian 12glibc2.26-4
Debian 13glibc2.26-4
Debian 14glibc2.26-4
Red Hat Enterprise Linux 7glibc0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-common0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-debuginfo0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-debuginfo-common0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-devel0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-headers0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-static0:2.17-222.el7
Red Hat Enterprise Linux 7glibc-utils0:2.17-222.el7
Red Hat Enterprise Linux 7nscd0:2.17-222.el7
SUSE Linux Enterprise Desktop 12 SP2glibc2.22-62.3.4
SUSE Linux Enterprise Desktop 12 SP2glibc2.22-62.6.2
SUSE Linux Enterprise Desktop 12 SP3glibc2.22-62.6.2
SUSE Linux Enterprise Desktop 12 SP3glibc2.22-62.3.4
SUSE Linux Enterprise Point of Sale 11 SP3glibc2.11.3-17.110.3.1
SUSE Linux Enterprise Point of Sale 11 SP3glibc2.11.3-17.110.6.2
SUSE Linux Enterprise Server 11 SP3-LTSSglibc2.11.3-17.110.6.2
SUSE Linux Enterprise Server 11 SP3-LTSSglibc2.11.3-17.110.3.1
SUSE Linux Enterprise Server 11 SP3-TERADATAglibc2.11.3-17.110.3.1
SUSE Linux Enterprise Server 11 SP3-TERADATAglibc2.11.3-17.110.6.2
SUSE Linux Enterprise Server 11 SP4glibc2.11.3-17.110.6.2
SUSE Linux Enterprise Server 11 SP4glibc2.11.3-17.110.3.1
SUSE Linux Enterprise Server 12 SP1-LTSSglibc2.19-40.9.5
SUSE Linux Enterprise Server 12 SP2glibc2.22-62.3.4
SUSE Linux Enterprise Server 12 SP2glibc2.22-62.6.2
SUSE Linux Enterprise Server 12 SP3glibc2.22-62.3.4
SUSE Linux Enterprise Server 12 SP3glibc2.22-62.6.2
SUSE Linux Enterprise Server 12-LTSSglibc2.19-22.24.5
SUSE Linux Enterprise Server 12-LTSSglibc2.19-22.27.958
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2glibc2.22-62.3.4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2glibc2.22-62.6.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4glibc2.11.3-17.110.6.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4glibc2.11.3-17.110.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1glibc2.19-40.9.5
SUSE Linux Enterprise Server for SAP Applications 12 SP2glibc2.22-62.6.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2glibc2.22-62.3.4
SUSE Linux Enterprise Server for SAP Applications 12 SP3glibc2.22-62.6.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3glibc2.22-62.3.4
SUSE Linux Enterprise Software Development Kit 11 SP4glibc2.11.3-17.110.3.1
SUSE Linux Enterprise Software Development Kit 11 SP4glibc2.11.3-17.110.6.2
SUSE Linux Enterprise Software Development Kit 12 SP2glibc2.22-62.3.4
SUSE Linux Enterprise Software Development Kit 12 SP2glibc2.22-62.6.2
SUSE Linux Enterprise Software Development Kit 12 SP3glibc2.22-62.3.4
SUSE Linux Enterprise Software Development Kit 12 SP3glibc2.22-62.6.2
SUSE OpenStack Cloud 6glibc2.19-40.9.5
Ubuntu 14.04 LTSeglibc2.19-0ubuntu6.14
Ubuntu 16.04 LTSglibc2.23-0ubuntu10
Ubuntu Pro 14.04 LTSmusl0.9.15-1ubuntu0.1~esm1
Ubuntu Pro 16.04 LTSmusl1.1.9-1ubuntu0.1~esm2
openSUSE Tumbleweedglibc2.34-1.2