PT-2017-3532 · Gnu+2 · Glibc+2
CVE-2017-1000408
·
Publicado
2017-12-11
·
Atualizado
2025-12-23
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
glibc version 2.1.1
Description:
The issue is related to a memory leak in glibc that can be triggered and amplified through the
LD HWCAP MASK environment variable. It is associated with errors in resource management in the dynamic loader ld.so of the glibc library, which provides system calls and basic functions. Exploitation of this issue may allow a local attacker to cause a memory leak using the LD HWCAP MASK variable.Recommendations:
For glibc version 2.1.1, as a temporary workaround, consider restricting the use of the
LD HWCAP MASK environment variable to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Missing Release of Resource after Effective Lifetime
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Suse
Ubuntu
Glibc