Lucene search

K
oraclelinuxOracleLinuxELSA-2018-1879
HistoryJun 25, 2018 - 12:00 a.m.

glibc security and bug fix update

2018-06-2500:00:00
linux.oracle.com
73

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.6%

[2.12-1.212.0.1]

  • backport rh patch 1047983 from OL7, Orabug 25407655
    [2.12-1.212]
  • CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
  • CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)
    [2.12-1.211]
  • Avoid large allocas in the dynamic linker (#1452717)
    [2.12-1.210]
  • Fix thread cancellation issues for setmntent() and others (#1437147).

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.6%