Security Advisory
CVE-2018-1000001
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.