Bug 1094154 – VUL-0: CVE-2018-11237: glibc: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library(aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer,leading to a buffer overflow in __mempcpy_avx512_n

Bug 1094154 - (CVE-2018-11237) VUL-0: CVE-2018-11237: glibc: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library(aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer,leading to a buffer overflow in __mempcpy_avx512_n

(CVE-2018-11237)
Summary:	VUL-0: CVE-2018-11237: glibc: An AVX-512-optimized implementation of the memp...

Status:	RESOLVED FIXED
Duplicates:	1092877 1093291 (view as bug list)

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other openSUSE Factory

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Assigned To:	Andreas Schwab
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/206155/
Whiteboard:	CVSSv2:NVD:CVE-2018-11237:4.6:(AV:L/A...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2018-05-22 08:31 UTC by Alexander Bergmann
Modified:	2018-12-17 23:52 UTC (History)
CC List:	8 users (show)

See Also:	https://sourceware.org/bugzilla/show_bug.cgi?id=23196
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bergmann 2018-05-22 08:31:12 UTC

CVE-2018-11237

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library
(aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer,
leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11237
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-11237.html
https://sourceware.org/bugzilla/show_bug.cgi?id=23196

Comment 1 Alexander Bergmann 2018-05-22 08:41:41 UTC

The memmove-avx512-no-vzeroupper.S optimization code is not available in SLE or openSUSE Leap.

Comment 2 Alexander Bergmann 2018-05-22 08:41:59 UTC

Factory is however affected.

Comment 3 Andreas Schwab 2018-05-22 09:14:57 UTC

*** Bug 1092877 has been marked as a duplicate of this bug. ***

Comment 4 Andreas Schwab 2018-05-22 09:18:05 UTC

*** Bug 1093291 has been marked as a duplicate of this bug. ***

Comment 5 Swamp Workflow Management 2018-05-23 14:00:06 UTC

This is an autogenerated message for OBS integration:
This bug (1094154) was mentioned in
https://build.opensuse.org/request/show/611653 Factory / glibc

Comment 13 Swamp Workflow Management 2018-06-06 13:07:50 UTC

SUSE-SU-2018:1562-1: An update that solves three vulnerabilities and has one errata is now available.

Category: security (important)
Bug References: 1086690,1094150,1094154,1094161
CVE References: CVE-2017-18269,CVE-2018-11236,CVE-2018-11237
Sources used:
SUSE OpenStack Cloud 7 (src):    glibc-2.22-62.13.2
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    glibc-2.22-62.13.2
SUSE Linux Enterprise Server for SAP 12-SP2 (src):    glibc-2.22-62.13.2
SUSE Linux Enterprise Server 12-SP3 (src):    glibc-2.22-62.13.2
SUSE Linux Enterprise Server 12-SP2-LTSS (src):    glibc-2.22-62.13.2
SUSE Linux Enterprise Desktop 12-SP3 (src):    glibc-2.22-62.13.2
SUSE Enterprise Storage 4 (src):    glibc-2.22-62.13.2
SUSE CaaS Platform ALL (src):    glibc-2.22-62.13.2
OpenStack Cloud Magnum Orchestration 7 (src):    glibc-2.22-62.13.2

Comment 14 Swamp Workflow Management 2018-06-07 22:15:38 UTC

openSUSE-SU-2018:1600-1: An update that solves three vulnerabilities and has one errata is now available.

Category: security (important)
Bug References: 1086690,1094150,1094154,1094161
CVE References: CVE-2017-18269,CVE-2018-11236,CVE-2018-11237
Sources used:
openSUSE Leap 42.3 (src):    glibc-2.22-19.1, glibc-2.22-19.2, glibc-testsuite-2.22-19.2, glibc-utils-2.22-19.1

Comment 15 Andreas Stieger 2018-06-09 08:30:17 UTC

Release for Leap 15.0, tracking shows done otherwise

Comment 16 Swamp Workflow Management 2018-06-09 13:13:59 UTC

openSUSE-SU-2018:1633-1: An update that solves one vulnerability and has one errata is now available.

Category: security (moderate)
Bug References: 1092877,1094154
CVE References: CVE-2018-11237
Sources used:
openSUSE Leap 15.0 (src):    glibc-2.26-lp150.11.3.2, glibc-testsuite-src-2.26-lp150.11.3.2, glibc-utils-src-2.26-lp150.11.3.2

Comment 17 Swamp Workflow Management 2018-07-19 13:12:33 UTC

SUSE-SU-2018:1991-1: An update that solves three vulnerabilities and has two fixes is now available.

Category: security (moderate)
Bug References: 1082318,1092877,1094150,1094154,1094161
CVE References: CVE-2017-18269,CVE-2018-11236,CVE-2018-11237
Sources used:
SUSE Linux Enterprise Module for Development Tools 15 (src):    glibc-2.26-13.3.1, glibc-utils-src-2.26-13.3.1
SUSE Linux Enterprise Module for Basesystem 15 (src):    glibc-2.26-13.3.1

Comment 18 Swamp Workflow Management 2018-08-01 16:08:53 UTC

openSUSE-SU-2018:2159-1: An update that solves three vulnerabilities and has two fixes is now available.

Category: security (moderate)
Bug References: 1082318,1092877,1094150,1094154,1094161
CVE References: CVE-2017-18269,CVE-2018-11236,CVE-2018-11237
Sources used:
openSUSE Leap 15.0 (src):    glibc-2.26-lp150.11.6.120, glibc-testsuite-src-2.26-lp150.11.6.120, glibc-utils-src-2.26-lp150.11.6.120

Comment 19 Swamp Workflow Management 2018-10-18 17:59:54 UTC

SUSE-SU-2018:1562-2: An update that solves three vulnerabilities and has one errata is now available.

Category: security (important)
Bug References: 1086690,1094150,1094154,1094161
CVE References: CVE-2017-18269,CVE-2018-11236,CVE-2018-11237
Sources used:
SUSE Linux Enterprise Server 12-SP2-BCL (src):    glibc-2.22-62.13.2