PT-2017-3532 · Gnu+2 · Glibc+2

CVE-2017-1000408

·

Publicado

2017-12-11

·

Atualizado

2025-12-23

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: glibc version 2.1.1
Description: The issue is related to a memory leak in glibc that can be triggered and amplified through the LD HWCAP MASK environment variable. It is associated with errors in resource management in the dynamic loader ld.so of the glibc library, which provides system calls and basic functions. Exploitation of this issue may allow a local attacker to cause a memory leak using the LD HWCAP MASK variable.
Recommendations: For glibc version 2.1.1, as a temporary workaround, consider restricting the use of the LD HWCAP MASK environment variable to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2018-00411
CVE-2017-1000408
OPENSUSE-SU-2018_0089-1
OPENSUSE-SU-2024:10792-1
SUSE-SU-2018:0074-1
USN-3534-1

Produtos afetados

Suse
Ubuntu
Glibc