CVE-2018-6551 in C Library
Summary
The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/02/2018
Disclosure
02/02/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 112777 | GNU C Library malloc memory corruption | 119 | Not defined | Official fix | CVE-2018-6551 |