Red Hat Security Advisory: glibc security, bug fix, and enhancement update

Fixed packages 36

Vulnerabilities 6

• Unscored —
  CVE-2014-9402

  The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name S…

  glibc eglibc Debian Ubuntu
  Feb 24, 2015
• Unscored —
  CVE-2015-5180

  res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer derefere…

  glibc eglibc glibc Debian Ubuntu
  Jun 27, 2017
• Unscored —
  CVE-2017-12132

  The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will…

  glibc eglibc glibc Debian Ubuntu
  Aug 1, 2017
• Unscored —
  CVE-2017-15670

  The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow…

  glibc eglibc glibc Debian Ubuntu
  Oct 20, 2017
• Unscored —
  CVE-2017-15804

  The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during une…

  glibc eglibc glibc Debian Ubuntu
  Oct 22, 2017
• Unscored —
  CVE-2018-1000001 Public exploit EPSS 13%

  In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before t…

  glibc eglibc glibc musl Debian Ubuntu
  Jan 31, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=677316
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1175369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1249603
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1348000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1349962
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1349964
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1372305
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1398413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1432085
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1435615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1440250
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1443236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1445644
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1445781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1447556
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1448822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1463692
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1468807
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1471111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1477529
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1482988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1484034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1504804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1505298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1508895
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1527904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1528418
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1529982
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533836
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0805.json
• report
  https://access.redhat.com/security/cve/CVE-2014-9402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-9402
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-9402
• report
  https://access.redhat.com/security/cve/CVE-2015-5180
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-5180
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-5180