Vulnerabilidades do GNU Libc Glibc
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam GNU Libc Glibc: 4 registro(s), com versões afetadas e correções.
CVE-2020-1752
Alta · 7.0
CWE-416 30/04/2020
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.
CVE-2019-1010025
Média · 5.3
CWE-330 15/07/2019
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.
CVE-2019-1010024
Média · 5.3
CWE-200 15/07/2019
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
CVE-2019-1010023
Média · 5.4
15/07/2019
GNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.