CVE-2018-11236 in Enterprise Session Border Controller

Summary

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

05/18/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
133498	Oracle Enterprise Session Border Controller glibc integer overflow	190	Not defined	Official fix	CVE-2018-11236
133497	Oracle Enterprise Communications Broker glibc integer overflow	190	Not defined	Official fix	CVE-2018-11236
133496	Oracle Communications Session Border Controller glibc integer overflow	190	Not defined	Official fix	CVE-2018-11236
117986	GNU C Library canonicalize.c realpath integer overflow	190	Not defined	Official fix	CVE-2018-11236

Sources

• MITRE
• NVD
• CVE Details