CVE-2013-4788: Input Validation
The PTRMANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow vulnerability in an application and using the known zero value pointer guard to calculate a pointer address.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4788?
CVE-2013-4788 has been rated as a medium severity vulnerability due to the potential for context-dependent attackers to control execution flow.
How do I fix CVE-2013-4788?
To fix CVE-2013-4788, you should upgrade your GNU C Library to version 2.18 or later.
What versions of glibc are affected by CVE-2013-4788?
CVE-2013-4788 affects glibc versions 2.4, 2.17, and earlier, as well as various versions of EGLIBC.
What does CVE-2013-4788 exploit?
CVE-2013-4788 exploits an uninitialized random value for the pointer guard, which can lead to buffer overflow vulnerabilities.
Can CVE-2013-4788 be exploited remotely?
CVE-2013-4788 is context-dependent and may require local access to exploit, but it can lead to significant risks if successfully leveraged.