REDHAT-BUG-1542102: Integer Overflow
A flaw was found in glibc. An integer overflow in the implementation of the posixmemalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
References: https://sourceware.org/bugzilla/showbug.cgi?id=22343
Patch: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=8e448310d74b283c5cd02b9ed7fb997b47bf9b22
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1542102?
The severity of REDHAT-BUG-1542102 is critical due to the potential for heap corruption.
How do I fix REDHAT-BUG-1542102?
To fix REDHAT-BUG-1542102, upgrade to a version of glibc later than 2.26.
What is affected by REDHAT-BUG-1542102?
REDHAT-BUG-1542102 affects the GNU C Library versions 2.26 and earlier.
What types of vulnerabilities are associated with REDHAT-BUG-1542102?
REDHAT-BUG-1542102 is associated with vulnerabilities like integer overflow and memory corruption.
Can REDHAT-BUG-1542102 lead to exploitation?
Yes, REDHAT-BUG-1542102 can potentially lead to exploitation by allowing attackers to manipulate memory.