Test ID:	1.3.6.1.4.1.25623.1.0.843422
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3534-1)
Summary:	The remote host is missing an update for the 'eglibc, glibc' package(s) announced via the USN-3534-1 advisory.
Description:	Summary: The remote host is missing an update for the 'eglibc, glibc' package(s) announced via the USN-3534-1 advisory. Vulnerability Insight: It was discovered that the GNU C library did not properly handle all of the possible return values from the kernel getcwd(2) syscall. A local attacker could potentially exploit this to execute arbitrary code in setuid programs and gain administrative privileges. (CVE-2018-1000001) A memory leak was discovered in the _dl_init_paths() function in the GNU C library dynamic loader. A local attacker could potentially exploit this with a specially crafted value in the LD_HWCAP_MASK environment variable, in combination with CVE-2017-1000409 and another vulnerability on a system with hardlink protections disabled, in order to gain administrative privileges. (CVE-2017-1000408) A heap-based buffer overflow was discovered in the _dl_init_paths() function in the GNU C library dynamic loader. A local attacker could potentially exploit this with a specially crafted value in the LD_LIBRARY_PATH environment variable, in combination with CVE-2017-1000408 and another vulnerability on a system with hardlink protections disabled, in order to gain administrative privileges. (CVE-2017-1000409) An off-by-one error leading to a heap-based buffer overflow was discovered in the GNU C library glob() implementation. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code via a maliciously crafted pattern. (CVE-2017-15670) A heap-based buffer overflow was discovered during unescaping of user names with the ~ operator in the GNU C library glob() implementation. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code via a maliciously crafted pattern. (CVE-2017-15804) It was discovered that the GNU C library dynamic loader mishandles RPATH and RUNPATH containing $ORIGIN for privileged (setuid or AT_SECURE) programs. A local attacker could potentially exploit this by providing a specially crafted library in the current working directory in order to gain administrative privileges. (CVE-2017-16997) It was discovered that the GNU C library malloc() implementation could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZE_MAX, resulting in a heap-based overflow. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 17.10. (CVE-2017-17426) Affected Software/OS: 'eglibc, glibc' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 17.10. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000408 https://www.exploit-db.com/exploits/43331/ http://seclists.org/oss-sec/2017/q4/385 http://www.openwall.com/lists/oss-security/2019/06/27/7 http://www.openwall.com/lists/oss-security/2019/06/28/1 http://www.openwall.com/lists/oss-security/2019/06/28/2 Common Vulnerability Exposure (CVE) ID: CVE-2017-1000409 Common Vulnerability Exposure (CVE) ID: CVE-2017-15670 BugTraq ID: 101521 http://www.securityfocus.com/bid/101521 RedHat Security Advisories: RHSA-2018:0805 https://access.redhat.com/errata/RHSA-2018:0805 RedHat Security Advisories: RHSA-2018:1879 https://access.redhat.com/errata/RHSA-2018:1879 Common Vulnerability Exposure (CVE) ID: CVE-2017-15804 BugTraq ID: 101535 http://www.securityfocus.com/bid/101535 Common Vulnerability Exposure (CVE) ID: CVE-2017-16997 BugTraq ID: 102228 http://www.securityfocus.com/bid/102228 RedHat Security Advisories: RHBA-2019:0327 https://access.redhat.com/errata/RHBA-2019:0327 RedHat Security Advisories: RHSA-2018:3092 https://access.redhat.com/errata/RHSA-2018:3092 Common Vulnerability Exposure (CVE) ID: CVE-2017-17426 Common Vulnerability Exposure (CVE) ID: CVE-2018-1000001 BugTraq ID: 102525 http://www.securityfocus.com/bid/102525 https://www.exploit-db.com/exploits/43775/ https://www.exploit-db.com/exploits/44889/ https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/ http://seclists.org/oss-sec/2018/q1/38 http://www.securitytracker.com/id/1040162 https://usn.ubuntu.com/3534-1/ https://usn.ubuntu.com/3536-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.