The vulnerability of the getcwd and realpath functions in libraries that provide system calls and the core glibc functions allows a hacker to execute arbitrary code.

🗓️ 21 Mar 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in getcwd and realpath in glibc and libraries allows arbitrary code execution via crafted SUID file.

Reporter	Title	Published	Views	Family All 150
0day.today	glibc - realpath() Privilege Escalation Exploit	13 Jun 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in GNU C Library	30 Jul 201822:39	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed GNU glibc vulnerabilities used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-16997 CVE-2018-1000001)	25 Jan 201912:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za	25 Jul 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in glibc affect PowerKVM	26 Sep 201817:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilties in GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by GNU C library (glibc) vulnerabilities	25 Jul 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2018-1000001, CVE-2017-16997, CVE-2017-1000408, CVE-2017-1000409, CVE-2017-17426)	29 Aug 201803:18	–	ibm

Vulners

Node

gnu glibcRange≤2.26

Source	Link
seclists	www.seclists.org/oss-sec/2018/q1/38
securityfocus	www.securityfocus.com/bid/102525
securitytracker	www.securitytracker.com/id/1040162
exploit-db	www.exploit-db.com/exploits/43775/
halfdog	www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/
wiki	www.wiki.rosalab.ru/ru/index.php/ROSA-SA-18-03-23.001
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16
web	www.web.nvd.nist.gov/view/vuln/detail

07 Nov 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 27.2

CVSS 37.8

EPSS0.41417

getcwd vulnerability realpath vulnerability glibc vulnerability buffer overflow suid file arbitrary code execution