CVE-2017-18269: Buffer Overflow
An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/glibcto a version that resolves this vulnerability.Fixed in 2.31-13+deb11u11Fixed in 2.31-13+deb11u14Fixed in 2.36-9+deb12u14Fixed in 2.36-9+deb12u7Fixed in 2.41-12+deb13u3Fixed in 2.42-17
Event History
Frequently Asked Questions
What is CVE-2017-18269?
CVE-2017-18269 is a vulnerability in the GNU C Library (glibc) that affects versions 2.21 through 2.27.
How severe is CVE-2017-18269?
CVE-2017-18269 has a severity score of 9.8, indicating it is a critical vulnerability.
What is the affected software of CVE-2017-18269?
The affected software of CVE-2017-18269 is glibc versions 2.21 through 2.27.
How do I fix CVE-2017-18269?
To fix CVE-2017-18269, you should update glibc to version 2.28 or higher.
Where can I find more information about CVE-2017-18269?
More information about CVE-2017-18269 can be found at the following references: [link1], [link2], [link3].