High · published August 24, 2022
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/glibc | < 2.31 | 2.31 |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| netapp/e-series_performance_analyzer | all versions | — |
| netapp/nfs_plug-in | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |