CVE-2018-1000001
67Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 13%
da publicação à arma0 dias
Publicada no NVD31 de jan.
1ª PoC16 de jan.
metasploit16 de jan.
VulnCheck+1456d
probabilidade de exploração
13%top 4% das CVEs
exploração observada
simVulnCheck
11 exploit(s) público(s)
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44889exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43775githubgithub.com/0x00-0x00/CVE-2018-1000001★ 31githubgithub.com/usernameid0/tools-for-CVE-2018-1000001★ 0vulncheckvulncheck.com/xdb/0b2d0c835d2bnão verificadovulncheckvulncheck.com/xdb/ef732ac75768não verificadocve_referencewww.exploit-db.com/exploits/44889/não verificadocve_referencewww.exploit-db.com/exploits/43775/não verificadovulncheckvulncheck.com/xdb/79a0160329aanão verificadovulncheckvulncheck.com/xdb/468c0c6fe03fnão verificadovulncheckvulncheck.com/xdb/e9ecb9b40edcnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://access.redhat.com/errata/RHSA-2018:0805http://seclists.org/oss-sec/2018/q1/38https://security.netapp.com/advisory/ntap-20190404-0003/https://usn.ubuntu.com/3534-1/https://usn.ubuntu.com/3536-1/https://www.exploit-db.com/exploits/43775/https://www.exploit-db.com/exploits/44889/https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/http://www.securityfocus.com/bid/102525http://www.securitytracker.com/id/1040162