CVE-2017-1000408: High severity GNU glibc vulnerability
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LDHWCAPMASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-1000408?
CVE-2017-1000408 is a memory leak vulnerability in glibc 2.1.1 that can be reached and amplified through the LD_HWCAP_MASK environment variable.
How can the memory leak in glibc 2.1.1 be exploited?
The memory leak in glibc 2.1.1 can be reached and amplified through the LD_HWCAP_MASK environment variable.
Which versions of glibc are vulnerable to CVE-2017-1000408?
The versions of glibc vulnerable to CVE-2017-1000408 are 2.19-0ubuntu6.14, 2.26-0ubuntu2.1, 2.23-0ubuntu10, and 2.1.1.
How do I fix the memory leak vulnerability in glibc?
To fix the memory leak vulnerability in glibc, update to the patched versions: 2.19-0ubuntu6.14, 2.26-0ubuntu2.1, 2.27, 2.23-0ubuntu10, or a higher version.
What is the severity of CVE-2017-1000408?
CVE-2017-1000408 has a severity rating of 7.8 (high).