CVE-2017-15670
CriticalSummary
The GNU C Library (glibc) before version 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function. This issue is related to the processing of home directories using the ~ operator followed by a long string.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access, threatening the integrity and confidentiality of data in the system. It may also allow attackers to execute malicious code.
Recommendation
It is recommended to update the glibc library to version 2.27 or later to mitigate this vulnerability. Additionally, monitoring and restricting access to functions that process home directories is advisable.
Original NVD description (English source)
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string.