CVE-2018-6485
01.02.2018, 14:29
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gnu | glibc | 𝑥 ≤ 2.26 |
| redhat | virtualization_host | 4.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| oracle | communications_session_border_controller | 8.0.0 |
| oracle | communications_session_border_controller | 8.1.0 |
| oracle | communications_session_border_controller | 8.2.0 |
| oracle | enterprise_communications_broker | 3.0.0 |
| oracle | enterprise_communications_broker | 3.1.0 |
| netapp | cloud_backup | - |
| netapp | data_ontap_edge | - |
| netapp | element_software | - |
| netapp | element_software_management | - |
| netapp | steelstore_cloud_integrated_storage | - |
| netapp | storage_replication_adapter | 7.2 ≤ |
| netapp | vasa_provider | 7.2 ≤ |
| netapp | vasa_provider | 6.x:x |
| netapp | virtual_storage_console | 7.2 ≤ |
| netapp | virtual_storage_console | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References