CVE-2017-1000408
- Source
- https://cve.org/CVERecord?id=CVE-2017-1000408
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000408.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-1000408
- Downstream
- Related
- Published
- 2018-02-01T04:29:00.247Z
- Modified
- 2026-07-08T15:10:00.204416Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LDHWCAPMASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
- References
-
- http://www.openwall.com/lists/oss-security/2019/06/27/7
- http://www.openwall.com/lists/oss-security/2019/06/28/1
- http://www.openwall.com/lists/oss-security/2019/06/28/2
- https://security.netapp.com/advisory/ntap-20190404-0003/
- http://seclists.org/oss-sec/2017/q4/385
- https://www.exploit-db.com/exploits/43331/
Affected packages
Git / github.com/bminor/glibc
Git / sourceware.org/git/glibc.git
Affected ranges
- Type
- GIT
- Repo
- https://sourceware.org/git/glibc.git
- Events
-
Introduced6d8ec2b1b2934abc8d951ccb534872f0086fda48Last affected6d8ec2b1b2934abc8d951ccb534872f0086fda48
- Database specific
{ "source": "CPE_STRING", "cpe": "cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "2.1.1" }, { "last_affected": "2.1.1" } ] }