| Package | Affected versions | Patched versions |
|---|---|---|
| glibc | = 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.1= 2.1.1= 2.1.1.6= 2.1.2= 2.1.3= 2.1.9= 2.10.1= 2.11= 2.11.1= 2.11.2= 2.11.3= 2.12.1= 2.12.2= 2.13= 2.14= 2.14.1= 2.15= 2.16= 2.4≤ 2.17 |
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow vulnerability in an application and using the known zero value pointer guard to calculate a pointer address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free