CVE-2018-11236 in Enterprise Session Border Controller

Resumen (Inglés)

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2018-05-18

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
133498	Oracle Enterprise Session Border Controller glibc desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2018-11236
133497	Oracle Enterprise Communications Broker glibc desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2018-11236
133496	Oracle Communications Session Border Controller glibc desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2018-11236
117986	GNU C Library canonicalize.c realpath desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2018-11236

Fuentes

• MITRE
• NVD
• CVE Details