The vulnerability in the implementation of the mempcpy function in libraries that handle system calls and core glibc functions allows a perpetrator to cause a service failure.

🗓️ 16 May 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The mempcpy vulnerability in system call libraries and glibc core functions allows buffer overflow and service failure.

Reporter	Title	Published	Views	Family All 97
0day.today	glibc 2.27 #GNU - Local Buffer Overflow Exploit	24 May 201800:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System	10 Jun 201907:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to publicly disclosed vulnerability from GNU glibc (CVE-2018-11237)	5 Mar 201918:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in glibc affect PowerKVM	4 Mar 201905:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU C Library affects IBM Watson Studio Local	20 Dec 201913:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to a Publicly disclosed vulnerability from GNU glibc (CVE-2018-11237)	17 Apr 201916:55	–	ibm
Tenable Nessus	Amazon Linux 2 : glibc (ALAS-2018-1131)	20 Dec 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : glibc (ALAS-2018-1109)	7 Dec 201800:00	–	nessus
Tenable Nessus	CentOS 7 : glibc (CESA-2018:3092)	16 Nov 201800:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : glibc (EulerOS-SA-2019-1386)	14 May 201900:00	–	nessus

Vulners

Node

oracle oracle_communications_session_border_controllerMatch8.0.0

OR

oracle oracle_communications_session_border_controllerMatch8.1.0

OR

oracle oracle_communications_session_border_controllerMatch8.2.0

OR

oracle enterprise_communications_brokerMatch3.0.0

OR

oracle enterprise_communications_brokerMatch3.1.0

OR

oracle oracle_enterprise_session_border_controllerMatch8.0.0

OR

oracle oracle_enterprise_session_border_controllerMatch8.1.0

OR

oracle oracle_enterprise_session_border_controllerMatch8.2.0

OR

gnu glibcRange≤2.27

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-11237
securityfocus	www.securityfocus.com/bid/104256
security	www.security.netapp.com/advisory/ntap-20190401-0001/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
web	www.web.nvd.nist.gov/view/vuln/detail

13 Nov 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.2

CVSS 37.8

EPSS0.00858

mempcpy vulnerability buffer overflow glibc libraries system calls service failure exploitation