GNU glibc Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities
BID:107160
CVE-2018-20796 | CVE-2019-9169 |Info
GNU glibc Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities
| Bugtraq ID: | 107160 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2018-20796 CVE-2019-9169 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 25 2019 12:00AM |
| Updated: | Feb 25 2019 12:00AM |
| Credit: | Hongxu Chen |
| Vulnerable: |
GNU glibc 2.12.2 GNU glibc 2.12.1 GNU glibc 2.11.2 GNU glibc 2.11.1 GNU glibc 2.10.1 GNU glibc 2.1.9 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU glibc 2.29 GNU glibc 2.28 GNU glibc 2.27 GNU glibc 2.26 GNU glibc 2.25 GNU glibc 2.24 GNU glibc 2.23 GNU glibc 2.22 GNU glibc 2.21 GNU glibc 2.20 GNU glibc 2.19 GNU glibc 2.18 GNU glibc 2.17 GNU glibc 2.16 GNU glibc 2.15 GNU glibc 2.14.1 GNU glibc 2.14 GNU glibc 2.13 GNU glibc 2.12 GNU glibc 2.11.3 GNU glibc 2.11 GNU glibc 2.10 GNU Cfengine 1.2.3 |
| Not Vulnerable: | |
Discussion
GNU glibc Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities
GNU glibc is prone to stack-based buffer-overflow and heap-based buffer overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
GNU glibc version 2.29 and prior are vulnerable.
GNU glibc is prone to stack-based buffer-overflow and heap-based buffer overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
GNU glibc version 2.29 and prior are vulnerable.
Solution / Fix
GNU glibc Stack Buffer Overflow and Heap Buffer Overflow Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.