Launchpad.net

CVE 2017-18269

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.

Related bugs and status

CVE-2017-18269 (Candidate) is related to these bugs:

Bug #1770480: preadv2 test does not consider new flag from linux 4.16

		In	Importance	Status
1770480	preadv2 test does not consider new flag from linux 4.16	glibc (Ubuntu)	Undecided	Fix Released
1770480	preadv2 test does not consider new flag from linux 4.16	glibc (Ubuntu Bionic)	Undecided	Fix Released
1770480	preadv2 test does not consider new flag from linux 4.16	glibc (Ubuntu Cosmic)	Undecided	Fix Released

Bug #1773363: glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+

		In	Importance	Status
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	glibc (Ubuntu)	Undecided	Confirmed
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	GLibC	Medium	Fix Released
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	glibc (Ubuntu Bionic)	Undecided	Confirmed
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	glibc (Ubuntu Cosmic)	Undecided	Won't Fix
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	linux (Ubuntu)	Medium	Confirmed
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	linux (Ubuntu Bionic)	Undecided	Confirmed
1773363	glibc tst-preadvwritev2 and tst-preadvwritev64v2 fail with Linux 4.16+	linux (Ubuntu Cosmic)	Undecided	Won't Fix

Bug #1797335: strstr() on ubuntu18.04 8 times slower than on ubuntu16

		In	Importance	Status
1797335	strstr() on ubuntu18.04 8 times slower than on ubuntu16	glibc (Ubuntu)	Undecided	Fix Released
1797335	strstr() on ubuntu18.04 8 times slower than on ubuntu16	GLibC	Unknown	Unknown
1797335	strstr() on ubuntu18.04 8 times slower than on ubuntu16	glibc (Ubuntu Cosmic)	Undecided	Won't Fix
1797335	strstr() on ubuntu18.04 8 times slower than on ubuntu16	glibc (Ubuntu Bionic)	Undecided	Fix Released

Bug #1838327: Support Japanese new era "令和 (Reiwa)"

		In	Importance	Status
1838327	Support Japanese new era "令和 (Reiwa)"	glibc (Ubuntu)	Undecided	Fix Released
1838327	Support Japanese new era "令和 (Reiwa)"	glibc (Ubuntu Disco)	Undecided	Won't Fix
1838327	Support Japanese new era "令和 (Reiwa)"	glibc (Ubuntu Bionic)	Undecided	Fix Released
1838327	Support Japanese new era "令和 (Reiwa)"	glibc (Ubuntu Xenial)	Undecided	Won't Fix

Bug #1851263: Ubuntu 18.04.3 LTS bump Glibc 2.27 to the latest stable

Summary				In	Importance	Status
	1851263	Ubuntu 18.04.3 LTS bump Glibc 2.27 to the latest stable		glibc (Ubuntu)	Undecided	Fix Released
	1851263	Ubuntu 18.04.3 LTS bump Glibc 2.27 to the latest stable		glibc (Ubuntu Bionic)	Undecided	Fix Released

Bug #1853193: copy_file_range test fails with linux 5.3+ on bionic

		In	Importance	Status
1853193	copy_file_range test fails with linux 5.3+ on bionic	glibc (Ubuntu)	Medium	Fix Released
1853193	copy_file_range test fails with linux 5.3+ on bionic	glibc (Ubuntu Bionic)	Medium	Fix Released
1853193	copy_file_range test fails with linux 5.3+ on bionic	GLibC	Medium	Fix Released

Bug #1858203: Patch for glibc Bug 23538 - "Hang in pthread_cond_broadcast" not available on Ubuntu LTS

Summary				In	Importance	Status
	1858203	Patch for glibc Bug 23538 - "Hang in pthread_cond_broadcast" not available on Ubuntu LTS		glibc (Ubuntu)	Undecided	Fix Released
	1858203	Patch for glibc Bug 23538 - "Hang in pthread_cond_broadcast" not available on Ubuntu LTS		glibc (Ubuntu Bionic)	High	Fix Released

Bug #1864864: [SRU] pthread_rwlock_trywrlock results in hang

		In	Importance	Status
1864864	[SRU] pthread_rwlock_trywrlock results in hang	glibc (Ubuntu)	High	Fix Released
1864864	[SRU] pthread_rwlock_trywrlock results in hang	glibc (Debian)	Unknown	Fix Released
1864864	[SRU] pthread_rwlock_trywrlock results in hang	glibc (Ubuntu Bionic)	Undecided	Fix Released

Bug #1885012: Provide libc6-lse binary package optimized for Large System Extensions (LSE)

Summary				In	Importance	Status
	1885012	Provide libc6-lse binary package optimized for Large System Extensions (LSE)		glibc (Ubuntu)	Undecided	Fix Released
	1885012	Provide libc6-lse binary package optimized for Large System Extensions (LSE)		glibc (Ubuntu Bionic)	Undecided	Fix Released

Bug #1891403: glibc tst-getrandom test needs more entropy causing test failures

		In	Importance	Status
1891403	glibc tst-getrandom test needs more entropy causing test failures	glibc (Ubuntu)	Undecided	Fix Released
1891403	glibc tst-getrandom test needs more entropy causing test failures	Auto Package Testing	Undecided	Fix Committed
1891403	glibc tst-getrandom test needs more entropy causing test failures	launchpad-buildd	Critical	Triaged
1891403	glibc tst-getrandom test needs more entropy causing test failures	glibc (Ubuntu Focal)	Undecided	Fix Released
1891403	glibc tst-getrandom test needs more entropy causing test failures	glibc (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2017-18269

Related bugs and status

Related bugs

References