{"api_version":"1","generated_at":"2026-07-23T07:49:21+00:00","cve":"CVE-2017-18269","urls":{"html":"https://cve.report/CVE-2017-18269","api":"https://cve.report/api/cve/CVE-2017-18269.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-18269","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-18269"},"summary":{"title":"CVE-2017-18269","description":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2018-05-18 16:29:00","updated_at":"2023-11-07 02:41:00"},"problem_types":["CWE-119"],"metrics":[],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22644","name":"https://sourceware.org/bugzilla/show_bug.cgi?id=22644","refsource":"MISC","tags":["Issue Tracking"],"title":"22644 – (CVE-2017-18269) memmove-sse2-unaligned on 32bit x86 produces garbage when crossing 2GB threshold (CVE-2017-18269)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/fingolfin/memmove-bug","name":"https://github.com/fingolfin/memmove-bug","refsource":"MISC","tags":["Third Party Advisory"],"title":"GitHub - fingolfin/memmove-bug: Reproducing a bug in GNU libc's memmove","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","name":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","refsource":"MISC","tags":["Patch"],"title":"sourceware.org Git - glibc.git/commit","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://security.netapp.com/advisory/ntap-20190401-0001/","name":"https://security.netapp.com/advisory/ntap-20190401-0001/","refsource":"CONFIRM","tags":[],"title":"May 2018 GNU C Library Vulnerabilities in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://security.netapp.com/advisory/ntap-20190329-0001/","name":"https://security.netapp.com/advisory/ntap-20190329-0001/","refsource":"CONFIRM","tags":[],"title":"NetApp Product Security","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","name":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","refsource":"","tags":[],"title":"sourceware.org Git - glibc.git/commit","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"https://usn.ubuntu.com/4416-1/","name":"USN-4416-1","refsource":"UBUNTU","tags":[],"title":"USN-4416-1: GNU C Library vulnerabilities | Ubuntu security notices | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18269","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18269","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"18269","vulnerable":"1","versionEndIncluding":"2.27","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnu","cpe5":"glibc","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"18269","vulnerable":"-1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"18269","vulnerable":"0","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2017-18269","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cd66c0e584c6d692bc8347b5e72723d02b8a8ada","refsource":"MISC","url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=cd66c0e584c6d692bc8347b5e72723d02b8a8ada"},{"name":"https://github.com/fingolfin/memmove-bug","refsource":"MISC","url":"https://github.com/fingolfin/memmove-bug"},{"name":"https://sourceware.org/bugzilla/show_bug.cgi?id=22644","refsource":"MISC","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22644"},{"refsource":"CONFIRM","name":"https://security.netapp.com/advisory/ntap-20190329-0001/","url":"https://security.netapp.com/advisory/ntap-20190329-0001/"},{"refsource":"CONFIRM","name":"https://security.netapp.com/advisory/ntap-20190401-0001/","url":"https://security.netapp.com/advisory/ntap-20190401-0001/"},{"refsource":"UBUNTU","name":"USN-4416-1","url":"https://usn.ubuntu.com/4416-1/"}]}},"nvd":{"publishedDate":"2018-05-18 16:29:00","lastModifiedDate":"2023-11-07 02:41:00","problem_types":["CWE-119"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"AND","children":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*","versionStartIncluding":"2.21","versionEndIncluding":"2.27","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":false,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","cpe_name":[]}]}],"cpe_match":[]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"18269","Ordinal":"127698","Title":"CVE-2017-18269","CVE":"CVE-2017-18269","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"18269","Ordinal":"1","NoteData":"An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"18269","Ordinal":"2","NoteData":"2018-05-18","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"18269","Ordinal":"3","NoteData":"2020-07-09","Type":"Other","Title":"Modified"}]}}}