Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201903-09
HistoryMar 14, 2019 - 12:00 a.m.

GNU C Library: Arbitrary descriptor allocation

2019-03-1400:00:00
Gentoo Foundation
security.gentoo.org
127

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

77.6%

JSON

Background

The GNU C library is the standard C library used by Gentoo Linux systems.

Description

A vulnerability was discovered in the GNU C Library functions xdr_bytes and xdr_string.

Impact

A remote attacker, by sending a crafted UDP packet, could cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All GNU C Library users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-libs/glibc-2.26.0"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-libs/glibc< 2.26.0UNKNOWN

Related

redhatcve 1
ubuntucve 1
ibm 4
cvelist 1
f5 1
cbl_mariner 1
nessus 9
debiancve 1
cve 1
nvd 1
osv 1
altlinux 1
fedora 2
openvas 3
prion 1
amazon 1
gentoo 1
photon 4
ubuntu 1
cloudfoundry 1
rosalinux 1
ics 1
redhatcve
redhatcve
CVE-2018-19591
2018-11-27 20:19:27
ubuntucve
ubuntucve
CVE-2018-19591
2018-12-04 00:00:00
ibm
ibm
Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2018-19591)
2019-03-27 06:55:02
Security Bulletin: Multiple Vulnerabilities in GNU C Library affects IBM Watson Studio Local
2019-12-20 13:55:15
Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.
2023-04-11 11:47:27
cvelist
cvelist
CVE-2018-19591
2018-12-04 16:00:00
f5
f5
K30002521 : GNU C Library vulnerability CVE-2018-19591
2018-12-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-19591 affecting package glibc 2.28-24
2020-10-08 18:09:54
nessus
nessus
Amazon Linux 2 : glibc (ALAS-2019-1140)
2019-01-10 00:00:00
Photon OS 1.0: Glibc PHSA-2019-1.0-0209
2020-01-28 00:00:00
Fedora 29 : glibc (2018-f6b7df660d)
2019-01-03 00:00:00
debiancve
debiancve
CVE-2018-19591
2018-12-04 16:29:00
cve
cve
CVE-2018-19591
2018-12-04 16:29:00
nvd
nvd
CVE-2018-19591
2018-12-04 16:29:00
osv
osv
CVE-2018-19591
2018-12-04 16:29:00
altlinux
altlinux
Security fix for the ALT Linux 9 package glibc version 6:2.27-alt7
2018-11-27 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: glibc-2.28-22.fc29
2018-11-30 02:52:15
[SECURITY] Fedora 28 Update: glibc-2.27-35.fc28
2018-12-04 02:24:24
openvas
openvas
Fedora Update for glibc FEDORA-2018-f6b7df660d
2019-05-07 00:00:00
Fedora Update for glibc FEDORA-2018-060302dc83
2018-12-04 00:00:00
Ubuntu: Security Advisory (USN-4416-1)
2020-07-07 00:00:00
prion
prion
Design/Logic Flaw
2018-12-04 16:29:00
amazon
amazon
Medium: glibc
2019-01-07 21:54:00
gentoo
gentoo
glibc: Multiple vulnerabilities
2019-08-15 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0134
2019-02-25 00:00:00
Important Photon OS Security Update - PHSA-2019-0134
2019-02-25 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0209
2019-02-20 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2020-07-06 00:00:00
cloudfoundry
cloudfoundry
USN-4416-1: GNU C Library vulnerabilities | Cloud Foundry
2020-08-27 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1844
2021-07-02 16:56:21
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

77.6%

JSON
Related for GLSA-201903-09
redhatcve1ubuntucve1ibm4cvelist1f51cbl_mariner1nessus9debiancve1cve1nvd1osv1altlinux1fedora2openvas3prion1amazon1gentoo1photon4ubuntu1cloudfoundry1rosalinux1ics1