crítica
CVE-2017-18269
glibc: memory corruption in memcpy-sse2-unaligned.S
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Photon OS. Más baja según Red Hat (media), Amazon (media), Ubuntu (media).
Descripción
An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 1.0 | glibc | 2.22-20.ph1 |
| Photon OS 2.0 | glibc | 2.26-12.ph2 |
| amazon linux 2 | glibc, glibc-all-langpacks, glibc-benchtests y 198 más | 2.26-28.amzn2.0.1 |
| debian 11 | glibc | 2.27-3 |
| debian 12 | glibc | 2.27-3 |
| debian 13 | glibc | 2.27-3 |
| debian 14 | glibc | 2.27-3 |
| debian 9 | glibc | 2.24-11+deb9u4 |
| echo | glibc | 2.27-3 |
| root.io debian 11 | rootio-glibc | 2.27-3 |
| root.io debian 12 | rootio-glibc | 2.27-3 |
| root.io debian 13 | rootio-glibc | 2.27-3 |
Mostrar las 214 entradas de 14 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 1.0 | glibc | 2.22-20.ph1 |
| Photon OS 2.0 | glibc | 2.26-12.ph2 |
| amazon linux 2 | glibc | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-all-langpacks | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-benchtests | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-common | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-debuginfo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-debuginfo-common | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-devel | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-headers | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-aa | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-af | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ak | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-am | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-an | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-anp | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ar | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-as | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ast | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ayc | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-az | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-be | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bem | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ber | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bg | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bhb | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bho | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-br | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-brx | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-bs | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-byn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ca | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ce | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-chr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-cmn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-crh | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-cs | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-csb | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-cv | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-cy | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-da | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-de | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-doi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-dv | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-dz | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-el | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-en | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-eo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-es | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-et | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-eu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fa | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ff | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fil | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fur | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-fy | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ga | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-gd | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-gez | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-gl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-gu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-gv | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ha | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hak | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-he | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hne | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hsb | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ht | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-hy | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ia | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-id | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ig | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ik | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-is | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-it | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-iu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ja | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ka | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-kk | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-kl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-km | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-kn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ko | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-kok | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ks | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ku | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-kw | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ky | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lb | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lg | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-li | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lij | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ln | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lt | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lv | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-lzh | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mag | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mai | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mg | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mhr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mk | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ml | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mni | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ms | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-mt | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-my | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nan | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nb | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nds | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ne | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nhn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-niu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-nso | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-oc | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-om | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-or | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-os | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-pa | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-pap | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-pl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ps | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-pt | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-quz | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-raj | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ro | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ru | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-rw | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sa | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sat | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sc | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sd | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-se | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sgs | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-shs | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-si | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sid | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sk | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-so | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sq | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ss | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-st | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sv | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-sw | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-szl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ta | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tcy | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-te | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tg | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-th | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-the | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ti | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tig | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tk | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tl | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tn | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tr | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ts | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-tt | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ug | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-uk | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-unm | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ur | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-uz | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-ve | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-vi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-wa | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-wae | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-wal | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-wo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-xh | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-yi | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-yo | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-yue | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-zh | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-langpack-zu | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-locale-source | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-minimal-langpack | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-nss-devel | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-static | 2.26-28.amzn2.0.1 |
| amazon linux 2 | glibc-utils | 2.26-28.amzn2.0.1 |
| amazon linux 2 | libcrypt | 2.26-28.amzn2.0.1 |
| amazon linux 2 | libcrypt-nss | 2.26-28.amzn2.0.1 |
| amazon linux 2 | nscd | 2.26-28.amzn2.0.1 |
| amazon linux 2 | nss_db | 2.26-28.amzn2.0.1 |
| amazon linux 2 | nss_hesiod | 2.26-28.amzn2.0.1 |
| amazon linux 2 | nss_nis | 2.26-28.amzn2.0.1 |
| debian 11 | glibc | 2.27-3 |
| debian 12 | glibc | 2.27-3 |
| debian 13 | glibc | 2.27-3 |
| debian 14 | glibc | 2.27-3 |
| debian 9 | glibc | 2.24-11+deb9u4 |
| echo | glibc | 2.27-3 |
| root.io debian 11 | rootio-glibc | 2.27-3 |
| root.io debian 12 | rootio-glibc | 2.27-3 |
| root.io debian 13 | rootio-glibc | 2.27-3 |
| ubuntu 16.04 | glibc | 2.23-0ubuntu11.2 |
| ubuntu 16.04-ESM | glibc | 2.23-0ubuntu11.2 |
Referencias
- https://access.redhat.com/security/cve/CVE-2017-18269
- https://github.com/fingolfin/memmove-bug
- https://nvd.nist.gov/vuln/detail/CVE-2017-18269
- https://security.netapp.com/advisory/ntap-20190329-0001/
- https://security.netapp.com/advisory/ntap-20190401-0001/
- https://sourceware.org/bugzilla/show_bug.cgi?id=22644
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=cd66c0e584c6d692bc8347b5e72723d02b8a8ada
- https://ubuntu.com/security/notices/USN-4416-1