CVE-2018-6485

Fixed in a distro release EPSS 5%

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

Published 2018-02-01 · CVE record · OSV

Products: gnu glibc, redhat virtualization_host, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, oracle communications_session_border_controller, oracle enterprise_communications_broker, netapp cloud_backup, netapp data_ontap_edge, netapp element_software, netapp element_software_management, netapp steelstore_cloud_integrated_storage, netapp storage_replication_adapter, netapp vasa_provider, netapp virtual_storage_console

Distro releases