# CVE-2018-11237: libc6-x32: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlie...

CVE-2018-11237 is fixed in 19 products on 1 platform, first by glibc-source 2.27-3ubuntu1.2, released April 30, 2020. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-11237
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0087
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 18, 2018

## Description

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | glibc-source Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [glibc-source 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-glibc-source-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc-bin Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc-bin 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc-bin-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc-dev-bin Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc-dev-bin 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc-dev-bin-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-amd64 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-amd64 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-amd64-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-armel Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-armel 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-armel-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-dev-amd64 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-dev-amd64 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-dev-amd64-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-dev-armel Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-dev-armel 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-dev-armel-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-dev-i386 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-dev-i386 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-dev-i386-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-dev-s390 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-dev-s390 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-dev-s390-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-dev-x32 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-dev-x32 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-dev-x32-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-i386 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-i386 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-i386-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-pic Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-pic 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-pic-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-s390 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-s390 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-s390-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | libc6-x32 Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [libc6-x32 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libc6-x32-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | locales Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [locales 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-locales-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | locales-all Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [locales-all 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-locales-all-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | multiarch-support Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [multiarch-support 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-multiarch-support-2.27-3ubuntu1.2.md) | Apr 30, 2020 |
| Linux | nscd Ubuntu 18.04.6 LTS (bionic) | 2.27-3ubuntu1.2 | [nscd 2.27-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-nscd-2.27-3ubuntu1.2.md) | Apr 30, 2020 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
