REDHAT-BUG-1533836: High severity gnu c library (glibc) vulnerability
A buffer underflow in realpath() in glibc when getcwd() returns relative path or unreachable path (i.e. not starting with '/') was found that can allow privilege escalation under certain conditions.
Reference:
http://www.openwall.com/lists/oss-security/2018/01/11/5
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1533836?
The severity of REDHAT-BUG-1533836 is considered critical due to its potential for privilege escalation.
How do I fix REDHAT-BUG-1533836?
To fix REDHAT-BUG-1533836, you should update the GNU C Library (glibc) to the latest patched version available.
What causes REDHAT-BUG-1533836?
REDHAT-BUG-1533836 is caused by a buffer underflow in the realpath() function when getcwd() returns specific types of paths.
Who is affected by REDHAT-BUG-1533836?
Users of GNU glibc are primarily affected by REDHAT-BUG-1533836, especially in environments where relative paths are used.
Can I exploit REDHAT-BUG-1533836?
Yes, under certain conditions, REDHAT-BUG-1533836 can be exploited to gain elevated privileges on vulnerable systems.