{
  "cveId": "CVE-2018-11236",
  "url": "https://patchblox.com/security/cve/CVE-2018-11236",
  "summary": "CVE-2018-11236 is fixed in 19 products on 1 platform, first by glibc-source 2.27-3ubuntu1.2, released April 30, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "glibc-source: stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname...",
  "description": "stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.",
  "published": "2018-05-18T09:29:00Z",
  "severity": "Medium",
  "epss": 0.0692,
  "epssPercentile": 0.94131,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "glibc-source",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "glibc-source 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-glibc-source-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc-bin 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc-bin-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc-dev-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc-dev-bin 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc-dev-bin-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-amd64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-amd64 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-amd64-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-armel",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-armel 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-armel-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-dev-amd64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-dev-amd64 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-dev-amd64-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-dev-armel",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-dev-armel 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-dev-armel-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-dev-i386",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-dev-i386 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-dev-i386-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-dev-s390",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-dev-s390 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-dev-s390-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-dev-x32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-dev-x32 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-dev-x32-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-i386",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-i386 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-i386-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-pic",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-pic 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-pic-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-s390",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-s390 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-s390-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libc6-x32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "libc6-x32 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libc6-x32-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "locales",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "locales 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-locales-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "locales-all",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "locales-all 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-locales-all-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "multiarch-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "multiarch-support 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-multiarch-support-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    },
    {
      "platform": "linux",
      "product": "nscd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.27-3ubuntu1.2",
      "fix": "nscd 2.27-3ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nscd-2.27-3ubuntu1.2",
      "released": "2020-04-30T10:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}