CVE-2018-6485: GNU Glibc

Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days.

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

Affected products

• GNU Glibc: up to and including 2.26
• Netapp Cloud Backup: affected versions not specified
• Netapp Data Ontap Edge: affected versions not specified
• Netapp Element Software: affected versions not specified
• Netapp Element Software Management: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Netapp Storage Replication Adapter: from 7.2
• Netapp Vasa Provider: from 7.2; version 6.x only
• Netapp Virtual Storage Console: from 7.2; affected versions not specified
• Oracle Communications Session Border Controller: version 8.0.0 only; version 8.1.0 only; version 8.2.0 only
• Oracle Enterprise Communications Broker: version 3.0.0 only; version 3.1.0 only
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only
• Red Hat Virtualization Host: version 4.0 only

Published 2018-02-01. Last modified 2026-06-17.