CVE-2013-4788
EPSS 7.6%
Description
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow vulnerability in an application and using the known zero value pointer guard to calculate a pointer address.
How to fix CVE-2013-4788
To remediate CVE-2013-4788, upgrade the affected package to a fixed version below.
- Debian/glibc—upgrade to 2.17-94 or later
Is CVE-2013-4788 being exploited?
Moderate — EPSS is 7.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 2.17-94