CVE-2018-6551 in C LibraryИнформация

Сводка

по MITRE

The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Резервировать

02.02.2018

Раскрытие

02.02.2018

Модерация

принято

Вход

VDB-112777

EPSS

0.02189

KEV

Нет

Деятельности

Очень низкий

Источники

Interested in the pricing of exploits?

See the underground prices here!