CVE-2018-6485

Name of the Vulnerable Software and Affected Versions glibc versions 2.26 and earlier

Description The issue is caused by an integer overflow in the implementation of the posix memalign in memalign functions, potentially leading to heap corruption. This could allow a remote attacker to cause a denial of service. The problem is related to a cyclic shift of a pointer, resulting in a memory overflow.

Recommendations For glibc versions 2.26 and earlier, consider updating to a version later than 2.26 to resolve the issue. As a temporary workaround, consider restricting the use of the memalign function until a patch is available. Avoid using the posix memalign function in the affected glibc versions to minimize the risk of exploitation.