CVE-2018-1000001
67Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 13%
de la publicación al arma0 días
Publicada en NVD31 ene
1ª PoC16 ene
metasploit16 ene
VulnCheck+1456d
probabilidad de explotación
13%top 4% de las CVE
explotación observada
síVulnCheck
11 exploit(s) público(s)
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
Productos afectados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44889exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43775githubgithub.com/0x00-0x00/CVE-2018-1000001★ 31githubgithub.com/usernameid0/tools-for-CVE-2018-1000001★ 0vulncheckvulncheck.com/xdb/0b2d0c835d2bno verificadovulncheckvulncheck.com/xdb/ef732ac75768no verificadocve_referencewww.exploit-db.com/exploits/44889/no verificadocve_referencewww.exploit-db.com/exploits/43775/no verificadovulncheckvulncheck.com/xdb/79a0160329aano verificadovulncheckvulncheck.com/xdb/468c0c6fe03fno verificadovulncheckvulncheck.com/xdb/e9ecb9b40edcno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://access.redhat.com/errata/RHSA-2018:0805http://seclists.org/oss-sec/2018/q1/38https://security.netapp.com/advisory/ntap-20190404-0003/https://usn.ubuntu.com/3534-1/https://usn.ubuntu.com/3536-1/https://www.exploit-db.com/exploits/43775/https://www.exploit-db.com/exploits/44889/https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/http://www.securityfocus.com/bid/102525http://www.securitytracker.com/id/1040162