CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a…

published January 31, 2018

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13368 · 96.4th percentile
Published
2018-01-31T14:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 13% → 28%
    epss
  • 06 SEP 03:11Z
    EPSS moved 13% → 28%
    epss
  • 30 AUG 16:00Z
    EPSS moved 28% → 13%
    epss
  • 29 AUG 04:29Z
    EPSS moved 13% → 28%
    epss
  • 31 JAN 14:00Z
    In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a…
    cvelistv5