CVE-2018-6551 in C Libraryالمعلومات

الملخص

بحسب MITRE

The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

حجز

02/02/2018

إفشاء

02/02/2018

الاعتدال

تمت الموافقة

إدخال

VDB-112777

EPSS

0.02189

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!