CVE-2017-7476 - gnulib: Out-of-bounds write by setting a large TZ variable

CRITICAL

gnulib: Out-of-bounds write by setting a large TZ variable

Published May 2, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 3.65%

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Gnulib before 2017-04-26

n/a

Version	Status	Constraints
Gnulib before 2017-04-26	affected	-

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	coreutils	Not affected	n/a
Red Hat Enterprise Linux 6	coreutils	Not affected	n/a
Red Hat Enterprise Linux 7	coreutils	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

Link	Providers	Tags
http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4		x_refsource_CONFIRM
http://www.securityfocus.com/bid/98098		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-7476		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1444774		x_refsource_CONFIRMExploitIssue TrackingMitigationThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445185		x_refsource_CONFIRMIssue TrackingPatchThird Party AdvisoryVDB Entry
https://nvd.nist.gov/vuln/detail/CVE-2017-7476
https://security-tracker.debian.org/tracker/CVE-2017-7476		x_refsource_CONFIRMThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-7476