Düşük CVSS 3.3
CVE-2019-19126: Glibc: güvenlik açığı
Açıklama (NVD)
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
Özet bilgiler
- Ürün
- Gnu Glibc
- CVSS v3.1
- 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,41 (yüzdelik 36)
- CWE
- CWE-665
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnu-glibc | — | — | 2.31 |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.10 | 19.10 | — |
| fedoraproject-fedora | 30 | 30 | — |
| fedoraproject-fedora | 31 | 31 | — |
| debian-debian-linux | 10.0 | 10.0 | — |