CVE-2018-1000001 Memory corruption in n/a
A buffer underflow in glibc's realpath function allows attackers to execute arbitrary code via crafted inputs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1000001?
CVE-2018-1000001 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 31 Jan 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
Weakness: CWE-787
Which versions are affected by CVE-2018-1000001?
It affects 9 products.
Linux distribution packages (9)
glibc SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:Linux Enterprise Server 11 SP3-LTSS | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:Linux Enterprise Server 11 SP4 | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 2.19-40.9.5 |
glibc SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 2.19-40.9.5 |
glibc SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 2.11.3-17.110.3.1 |
glibc SUSE:OpenStack Cloud 6 | All versions | 2.19-40.9.5 |
Products include Canonical Ubuntu Linux, Gnu Glibc, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus and 3 more.
How do I fix CVE-2018-1000001?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-1000001 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-1000001 exists.
Public exploit code: 1 Metasploit module, 3 Exploit-DB entries and 2 proofs of concept on GitHub.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2018-1000001, GHSA-gxfx-pp2w-7f8c, SUSE-SU-2018:0071-1, SUSE-SU-2018:0075-1, UBUNTU-CVE-2018-1000001.