CVE-2017-15804

HIGH

Description

The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.

References

http://www.securityfocus.com/bid/101535

https://access.redhat.com/errata/RHSA-2018:0805

https://access.redhat.com/errata/RHSA-2018:1879

https://sourceware.org/bugzilla/show_bug.cgi?id=22332

https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commit;h=a159b53fa059947cc2548e3b0d5bdcf7b9630ba8

Details

Source: MITRE

Published: 2017-10-22

Updated: 2018-06-20

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH

CVSS v3.0

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 3.9

Severity: CRITICAL

Tenable Plugins

View all (27 total)

ID	Name	Product	Family	Severity
127406	NewStart CGSL MAIN 4.05 : glibc Multiple Vulnerabilities (NS-SA-2019-0142)	Nessus	NewStart CGSL Local Security Checks	high
127183	NewStart CGSL CORE 5.04 / MAIN 5.04 : glibc Multiple Vulnerabilities (NS-SA-2019-0024)	Nessus	NewStart CGSL Local Security Checks	high
125004	EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1551)	Nessus	Huawei Local Security Checks	critical
121750	Photon OS 1.0: Glibc PHSA-2017-0041	Nessus	PhotonOS Local Security Checks	high
117804	SUSE SLES11 Security Update : glibc (SUSE-SU-2018:2883-1)	Nessus	SuSE Local Security Checks	high
111890	Photon OS 1.0: Curl / Freetype2 / Glibc / Systemd PHSA-2017-0041 (deprecated)	Nessus	PhotonOS Local Security Checks	high
111547	SUSE SLES12 Security Update : glibc (SUSE-SU-2018:2187-1)	Nessus	SuSE Local Security Checks	high
111546	SUSE SLES12 Security Update : glibc (SUSE-SU-2018:2185-1)	Nessus	SuSE Local Security Checks	high
111335	Amazon Linux 2 : glibc (ALAS-2018-1048)	Nessus	Amazon Linux Local Security Checks	high
110886	Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20180619)	Nessus	Scientific Linux Local Security Checks	high
110884	OracleVM 3.3 / 3.4 : glibc (OVMSA-2018-0235)	Nessus	OracleVM Local Security Checks	high
110704	Oracle Linux 6 : glibc (ELSA-2018-1879)	Nessus	Oracle Linux Local Security Checks	high
110648	CentOS 6 : glibc (CESA-2018:1879)	Nessus	CentOS Local Security Checks	high
110603	RHEL 6 : glibc (RHSA-2018:1879)	Nessus	Red Hat Local Security Checks	high
109699	Amazon Linux AMI : glibc (ALAS-2018-1017)	Nessus	Amazon Linux Local Security Checks	high
109447	Scientific Linux Security Update : glibc on SL7.x x86_64 (20180410)	Nessus	Scientific Linux Local Security Checks	high
109371	CentOS 7 : glibc (CESA-2018:0805)	Nessus	CentOS Local Security Checks	high
109105	Oracle Linux 7 : glibc (ELSA-2018-0805)	Nessus	Oracle Linux Local Security Checks	high
108985	RHEL 7 : glibc (RHSA-2018:0805)	Nessus	Red Hat Local Security Checks	high
108822	GLSA-201804-02 : glibc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
106281	Fedora 26 : glibc (2018-8e27ad96ed)	Nessus	Fedora Local Security Checks	high
106134	Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : eglibc, glibc vulnerabilities (USN-3534-1)	Nessus	Ubuntu Local Security Checks	high
106059	openSUSE Security Update : glibc (openSUSE-2018-30)	Nessus	SuSE Local Security Checks	high
106044	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2018:0074-1)	Nessus	SuSE Local Security Checks	high
106014	Fedora 27 : glibc (2017-fb5e227432)	Nessus	Fedora Local Security Checks	high
104293	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2017-1268)	Nessus	Huawei Local Security Checks	high
104292	EulerOS 2.0 SP1 : glibc (EulerOS-SA-2017-1267)	Nessus	Huawei Local Security Checks	high