What’s Vulnerable › Vulnerabilities

CVE-2018-6485

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-02-01 · updated 2026-06-17
• Weakness: CWE-190

Description

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

Affected products

• GNU C Library (glibc): through 2.26
• NetApp Cloud Backup: all versions
• NetApp Data Ontap Edge: all versions
• NetApp Element Software: all versions
• NetApp Element Software Management: all versions
• NetApp Steelstore Cloud Integrated Storage: all versions
• NetApp Storage Replication Adapter: from 7.2
• NetApp VASA Provider for Clustered Data ONTAP: from 7.2; 6.x
• NetApp Virtual Storage Console: from 7.2
• Oracle Corporation Communications Session Border Controller: 8.0.0, 8.1.0, 8.2.0
• Oracle Corporation Enterprise Communications Broker: 3.0.0, 3.1.0
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Workstation: 7.0
• RedHat Virtualization Host: 4.0

References

• http://bugs.debian.org/878159
• http://www.securityfocus.com/bid/102912
• https://access.redhat.com/errata/RHBA-2019:0327
• https://access.redhat.com/errata/RHSA-2018:3092
• https://security.netapp.com/advisory/ntap-20190404-0003/
• https://sourceware.org/bugzilla/show_bug.cgi?id=22343
• https://usn.ubuntu.com/4218-1/
• https://usn.ubuntu.com/4416-1/
• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
• http://bugs.debian.org/878159
• http://www.securityfocus.com/bid/102912
• https://access.redhat.com/errata/RHBA-2019:0327

Get alerted when CVE-2018-6485 or the next vulnerability affects your stack