CVE-2018-6485
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
| Software | From | Fixed in |
|---|---|---|
| gnu / glibc | - | 2.26.x |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / virtualization_host | 4.0 | 4.0.x |
| oracle / enterprise_communications_broker | 3.0.0 | 3.0.0.x |
| oracle / enterprise_communications_broker | 3.1.0 | 3.1.0.x |
| oracle / communications_session_border_controller | 8.1.0 | 8.1.0.x |
| oracle / communications_session_border_controller | 8.2.0 | 8.2.0.x |
| oracle / communications_session_border_controller | 8.0.0 | 8.0.0.x |
| netapp / vasa_provider | 7.2 | 7.2.x |
| netapp / virtual_storage_console | 7.2 | 7.2.x |
| netapp / vasa_provider | 6.x | 6.x.x |
| netapp / storage_replication_adapter | 7.2 | 7.2.x |
- http://bugs.debian.org/878159
- http://www.securityfocus.com/bid/102912
- https://access.redhat.com/errata/RHBA-2019:0327
- https://access.redhat.com/errata/RHSA-2018:3092
- https://security.netapp.com/advisory/ntap-20190404-0003/
- https://sourceware.org/bugzilla/show_bug.cgi?id=22343
- https://usn.ubuntu.com/4218-1/
- https://usn.ubuntu.com/4416-1/
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime