An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 9.8 | CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Primary | 2.0 | 7.5 | HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://bugs.debian.org/878159 | cve@mitre.org | Issue Tracking Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/102912 | cve@mitre.org | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHBA-2019:0327 | cve@mitre.org | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:3092 | cve@mitre.org | Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20190404-0003/ | cve@mitre.org | Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=22343 | cve@mitre.org | Issue Tracking Third Party Advisory |
| https://usn.ubuntu.com/4218-1/ | cve@mitre.org | N/A |
| https://usn.ubuntu.com/4416-1/ | cve@mitre.org | N/A |
| https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html | cve@mitre.org | Patch Third Party Advisory |