7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.2%
Issue Overview:
A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable. (CVE-2019-19126)
A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability. (CVE-2020-10029)
A use-after-free vulnerability was found in glibc in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. (CVE-2020-1752)
Affected Packages:
glibc
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update glibc to update your system.
New Packages:
aarch64:
glibc-2.26-37.amzn2.aarch64
libcrypt-2.26-37.amzn2.aarch64
libcrypt-nss-2.26-37.amzn2.aarch64
glibc-devel-2.26-37.amzn2.aarch64
glibc-static-2.26-37.amzn2.aarch64
glibc-headers-2.26-37.amzn2.aarch64
glibc-common-2.26-37.amzn2.aarch64
glibc-locale-source-2.26-37.amzn2.aarch64
glibc-langpack-eo-2.26-37.amzn2.aarch64
glibc-langpack-aa-2.26-37.amzn2.aarch64
glibc-langpack-af-2.26-37.amzn2.aarch64
glibc-langpack-ak-2.26-37.amzn2.aarch64
glibc-langpack-am-2.26-37.amzn2.aarch64
glibc-langpack-an-2.26-37.amzn2.aarch64
glibc-langpack-anp-2.26-37.amzn2.aarch64
glibc-langpack-ar-2.26-37.amzn2.aarch64
glibc-langpack-as-2.26-37.amzn2.aarch64
glibc-langpack-ast-2.26-37.amzn2.aarch64
glibc-langpack-ayc-2.26-37.amzn2.aarch64
glibc-langpack-az-2.26-37.amzn2.aarch64
glibc-langpack-be-2.26-37.amzn2.aarch64
glibc-langpack-bem-2.26-37.amzn2.aarch64
glibc-langpack-ber-2.26-37.amzn2.aarch64
glibc-langpack-bg-2.26-37.amzn2.aarch64
glibc-langpack-bhb-2.26-37.amzn2.aarch64
glibc-langpack-bho-2.26-37.amzn2.aarch64
glibc-langpack-bn-2.26-37.amzn2.aarch64
glibc-langpack-bo-2.26-37.amzn2.aarch64
glibc-langpack-br-2.26-37.amzn2.aarch64
glibc-langpack-brx-2.26-37.amzn2.aarch64
glibc-langpack-bs-2.26-37.amzn2.aarch64
glibc-langpack-byn-2.26-37.amzn2.aarch64
glibc-langpack-ca-2.26-37.amzn2.aarch64
glibc-langpack-ce-2.26-37.amzn2.aarch64
glibc-langpack-chr-2.26-37.amzn2.aarch64
glibc-langpack-cmn-2.26-37.amzn2.aarch64
glibc-langpack-crh-2.26-37.amzn2.aarch64
glibc-langpack-cs-2.26-37.amzn2.aarch64
glibc-langpack-csb-2.26-37.amzn2.aarch64
glibc-langpack-cv-2.26-37.amzn2.aarch64
glibc-langpack-cy-2.26-37.amzn2.aarch64
glibc-langpack-da-2.26-37.amzn2.aarch64
glibc-langpack-de-2.26-37.amzn2.aarch64
glibc-langpack-doi-2.26-37.amzn2.aarch64
glibc-langpack-dv-2.26-37.amzn2.aarch64
glibc-langpack-dz-2.26-37.amzn2.aarch64
glibc-langpack-el-2.26-37.amzn2.aarch64
glibc-langpack-en-2.26-37.amzn2.aarch64
glibc-langpack-es-2.26-37.amzn2.aarch64
glibc-langpack-et-2.26-37.amzn2.aarch64
glibc-langpack-eu-2.26-37.amzn2.aarch64
glibc-langpack-fa-2.26-37.amzn2.aarch64
glibc-langpack-ff-2.26-37.amzn2.aarch64
glibc-langpack-fi-2.26-37.amzn2.aarch64
glibc-langpack-fil-2.26-37.amzn2.aarch64
glibc-langpack-fo-2.26-37.amzn2.aarch64
glibc-langpack-fr-2.26-37.amzn2.aarch64
glibc-langpack-fur-2.26-37.amzn2.aarch64
glibc-langpack-fy-2.26-37.amzn2.aarch64
glibc-langpack-ga-2.26-37.amzn2.aarch64
glibc-langpack-gd-2.26-37.amzn2.aarch64
glibc-langpack-gez-2.26-37.amzn2.aarch64
glibc-langpack-gl-2.26-37.amzn2.aarch64
glibc-langpack-gu-2.26-37.amzn2.aarch64
glibc-langpack-gv-2.26-37.amzn2.aarch64
glibc-langpack-ha-2.26-37.amzn2.aarch64
glibc-langpack-hak-2.26-37.amzn2.aarch64
glibc-langpack-he-2.26-37.amzn2.aarch64
glibc-langpack-hi-2.26-37.amzn2.aarch64
glibc-langpack-hne-2.26-37.amzn2.aarch64
glibc-langpack-hr-2.26-37.amzn2.aarch64
glibc-langpack-hsb-2.26-37.amzn2.aarch64
glibc-langpack-ht-2.26-37.amzn2.aarch64
glibc-langpack-hu-2.26-37.amzn2.aarch64
glibc-langpack-hy-2.26-37.amzn2.aarch64
glibc-langpack-ia-2.26-37.amzn2.aarch64
glibc-langpack-id-2.26-37.amzn2.aarch64
glibc-langpack-ig-2.26-37.amzn2.aarch64
glibc-langpack-ik-2.26-37.amzn2.aarch64
glibc-langpack-is-2.26-37.amzn2.aarch64
glibc-langpack-it-2.26-37.amzn2.aarch64
glibc-langpack-iu-2.26-37.amzn2.aarch64
glibc-langpack-ja-2.26-37.amzn2.aarch64
glibc-langpack-ka-2.26-37.amzn2.aarch64
glibc-langpack-kk-2.26-37.amzn2.aarch64
glibc-langpack-kl-2.26-37.amzn2.aarch64
glibc-langpack-km-2.26-37.amzn2.aarch64
glibc-langpack-kn-2.26-37.amzn2.aarch64
glibc-langpack-ko-2.26-37.amzn2.aarch64
glibc-langpack-kok-2.26-37.amzn2.aarch64
glibc-langpack-ks-2.26-37.amzn2.aarch64
glibc-langpack-ku-2.26-37.amzn2.aarch64
glibc-langpack-kw-2.26-37.amzn2.aarch64
glibc-langpack-ky-2.26-37.amzn2.aarch64
glibc-langpack-lb-2.26-37.amzn2.aarch64
glibc-langpack-lg-2.26-37.amzn2.aarch64
glibc-langpack-li-2.26-37.amzn2.aarch64
glibc-langpack-lij-2.26-37.amzn2.aarch64
glibc-langpack-ln-2.26-37.amzn2.aarch64
glibc-langpack-lo-2.26-37.amzn2.aarch64
glibc-langpack-lt-2.26-37.amzn2.aarch64
glibc-langpack-lv-2.26-37.amzn2.aarch64
glibc-langpack-lzh-2.26-37.amzn2.aarch64
glibc-langpack-mag-2.26-37.amzn2.aarch64
glibc-langpack-mai-2.26-37.amzn2.aarch64
glibc-langpack-mg-2.26-37.amzn2.aarch64
glibc-langpack-mhr-2.26-37.amzn2.aarch64
glibc-langpack-mi-2.26-37.amzn2.aarch64
glibc-langpack-mk-2.26-37.amzn2.aarch64
glibc-langpack-ml-2.26-37.amzn2.aarch64
glibc-langpack-mn-2.26-37.amzn2.aarch64
glibc-langpack-mni-2.26-37.amzn2.aarch64
glibc-langpack-mr-2.26-37.amzn2.aarch64
glibc-langpack-ms-2.26-37.amzn2.aarch64
glibc-langpack-mt-2.26-37.amzn2.aarch64
glibc-langpack-my-2.26-37.amzn2.aarch64
glibc-langpack-nan-2.26-37.amzn2.aarch64
glibc-langpack-nb-2.26-37.amzn2.aarch64
glibc-langpack-nds-2.26-37.amzn2.aarch64
glibc-langpack-ne-2.26-37.amzn2.aarch64
glibc-langpack-nhn-2.26-37.amzn2.aarch64
glibc-langpack-niu-2.26-37.amzn2.aarch64
glibc-langpack-nl-2.26-37.amzn2.aarch64
glibc-langpack-nn-2.26-37.amzn2.aarch64
glibc-langpack-nr-2.26-37.amzn2.aarch64
glibc-langpack-nso-2.26-37.amzn2.aarch64
glibc-langpack-oc-2.26-37.amzn2.aarch64
glibc-langpack-om-2.26-37.amzn2.aarch64
glibc-langpack-or-2.26-37.amzn2.aarch64
glibc-langpack-os-2.26-37.amzn2.aarch64
glibc-langpack-pa-2.26-37.amzn2.aarch64
glibc-langpack-pap-2.26-37.amzn2.aarch64
glibc-langpack-pl-2.26-37.amzn2.aarch64
glibc-langpack-ps-2.26-37.amzn2.aarch64
glibc-langpack-pt-2.26-37.amzn2.aarch64
glibc-langpack-quz-2.26-37.amzn2.aarch64
glibc-langpack-raj-2.26-37.amzn2.aarch64
glibc-langpack-ro-2.26-37.amzn2.aarch64
glibc-langpack-ru-2.26-37.amzn2.aarch64
glibc-langpack-rw-2.26-37.amzn2.aarch64
glibc-langpack-sa-2.26-37.amzn2.aarch64
glibc-langpack-sat-2.26-37.amzn2.aarch64
glibc-langpack-sc-2.26-37.amzn2.aarch64
glibc-langpack-sd-2.26-37.amzn2.aarch64
glibc-langpack-se-2.26-37.amzn2.aarch64
glibc-langpack-sgs-2.26-37.amzn2.aarch64
glibc-langpack-shs-2.26-37.amzn2.aarch64
glibc-langpack-si-2.26-37.amzn2.aarch64
glibc-langpack-sid-2.26-37.amzn2.aarch64
glibc-langpack-sk-2.26-37.amzn2.aarch64
glibc-langpack-sl-2.26-37.amzn2.aarch64
glibc-langpack-so-2.26-37.amzn2.aarch64
glibc-langpack-sq-2.26-37.amzn2.aarch64
glibc-langpack-sr-2.26-37.amzn2.aarch64
glibc-langpack-ss-2.26-37.amzn2.aarch64
glibc-langpack-st-2.26-37.amzn2.aarch64
glibc-langpack-sv-2.26-37.amzn2.aarch64
glibc-langpack-sw-2.26-37.amzn2.aarch64
glibc-langpack-szl-2.26-37.amzn2.aarch64
glibc-langpack-ta-2.26-37.amzn2.aarch64
glibc-langpack-tcy-2.26-37.amzn2.aarch64
glibc-langpack-te-2.26-37.amzn2.aarch64
glibc-langpack-tg-2.26-37.amzn2.aarch64
glibc-langpack-th-2.26-37.amzn2.aarch64
glibc-langpack-the-2.26-37.amzn2.aarch64
glibc-langpack-ti-2.26-37.amzn2.aarch64
glibc-langpack-tig-2.26-37.amzn2.aarch64
glibc-langpack-tk-2.26-37.amzn2.aarch64
glibc-langpack-tl-2.26-37.amzn2.aarch64
glibc-langpack-tn-2.26-37.amzn2.aarch64
glibc-langpack-tr-2.26-37.amzn2.aarch64
glibc-langpack-ts-2.26-37.amzn2.aarch64
glibc-langpack-tt-2.26-37.amzn2.aarch64
glibc-langpack-ug-2.26-37.amzn2.aarch64
glibc-langpack-uk-2.26-37.amzn2.aarch64
glibc-langpack-unm-2.26-37.amzn2.aarch64
glibc-langpack-ur-2.26-37.amzn2.aarch64
glibc-langpack-uz-2.26-37.amzn2.aarch64
glibc-langpack-ve-2.26-37.amzn2.aarch64
glibc-langpack-vi-2.26-37.amzn2.aarch64
glibc-langpack-wa-2.26-37.amzn2.aarch64
glibc-langpack-wae-2.26-37.amzn2.aarch64
glibc-langpack-wal-2.26-37.amzn2.aarch64
glibc-langpack-wo-2.26-37.amzn2.aarch64
glibc-langpack-xh-2.26-37.amzn2.aarch64
glibc-langpack-yi-2.26-37.amzn2.aarch64
glibc-langpack-yo-2.26-37.amzn2.aarch64
glibc-langpack-yue-2.26-37.amzn2.aarch64
glibc-langpack-zh-2.26-37.amzn2.aarch64
glibc-langpack-zu-2.26-37.amzn2.aarch64
glibc-all-langpacks-2.26-37.amzn2.aarch64
glibc-minimal-langpack-2.26-37.amzn2.aarch64
nscd-2.26-37.amzn2.aarch64
nss_db-2.26-37.amzn2.aarch64
nss_nis-2.26-37.amzn2.aarch64
nss_hesiod-2.26-37.amzn2.aarch64
glibc-nss-devel-2.26-37.amzn2.aarch64
glibc-utils-2.26-37.amzn2.aarch64
glibc-debuginfo-2.26-37.amzn2.aarch64
glibc-benchtests-2.26-37.amzn2.aarch64
i686:
glibc-2.26-37.amzn2.i686
libcrypt-2.26-37.amzn2.i686
libcrypt-nss-2.26-37.amzn2.i686
glibc-devel-2.26-37.amzn2.i686
glibc-static-2.26-37.amzn2.i686
glibc-headers-2.26-37.amzn2.i686
glibc-common-2.26-37.amzn2.i686
glibc-locale-source-2.26-37.amzn2.i686
glibc-langpack-eo-2.26-37.amzn2.i686
glibc-langpack-aa-2.26-37.amzn2.i686
glibc-langpack-af-2.26-37.amzn2.i686
glibc-langpack-ak-2.26-37.amzn2.i686
glibc-langpack-am-2.26-37.amzn2.i686
glibc-langpack-an-2.26-37.amzn2.i686
glibc-langpack-anp-2.26-37.amzn2.i686
glibc-langpack-ar-2.26-37.amzn2.i686
glibc-langpack-as-2.26-37.amzn2.i686
glibc-langpack-ast-2.26-37.amzn2.i686
glibc-langpack-ayc-2.26-37.amzn2.i686
glibc-langpack-az-2.26-37.amzn2.i686
glibc-langpack-be-2.26-37.amzn2.i686
glibc-langpack-bem-2.26-37.amzn2.i686
glibc-langpack-ber-2.26-37.amzn2.i686
glibc-langpack-bg-2.26-37.amzn2.i686
glibc-langpack-bhb-2.26-37.amzn2.i686
glibc-langpack-bho-2.26-37.amzn2.i686
glibc-langpack-bn-2.26-37.amzn2.i686
glibc-langpack-bo-2.26-37.amzn2.i686
glibc-langpack-br-2.26-37.amzn2.i686
glibc-langpack-brx-2.26-37.amzn2.i686
glibc-langpack-bs-2.26-37.amzn2.i686
glibc-langpack-byn-2.26-37.amzn2.i686
glibc-langpack-ca-2.26-37.amzn2.i686
glibc-langpack-ce-2.26-37.amzn2.i686
glibc-langpack-chr-2.26-37.amzn2.i686
glibc-langpack-cmn-2.26-37.amzn2.i686
glibc-langpack-crh-2.26-37.amzn2.i686
glibc-langpack-cs-2.26-37.amzn2.i686
glibc-langpack-csb-2.26-37.amzn2.i686
glibc-langpack-cv-2.26-37.amzn2.i686
glibc-langpack-cy-2.26-37.amzn2.i686
glibc-langpack-da-2.26-37.amzn2.i686
glibc-langpack-de-2.26-37.amzn2.i686
glibc-langpack-doi-2.26-37.amzn2.i686
glibc-langpack-dv-2.26-37.amzn2.i686
glibc-langpack-dz-2.26-37.amzn2.i686
glibc-langpack-el-2.26-37.amzn2.i686
glibc-langpack-en-2.26-37.amzn2.i686
glibc-langpack-es-2.26-37.amzn2.i686
glibc-langpack-et-2.26-37.amzn2.i686
glibc-langpack-eu-2.26-37.amzn2.i686
glibc-langpack-fa-2.26-37.amzn2.i686
glibc-langpack-ff-2.26-37.amzn2.i686
glibc-langpack-fi-2.26-37.amzn2.i686
glibc-langpack-fil-2.26-37.amzn2.i686
glibc-langpack-fo-2.26-37.amzn2.i686
glibc-langpack-fr-2.26-37.amzn2.i686
glibc-langpack-fur-2.26-37.amzn2.i686
glibc-langpack-fy-2.26-37.amzn2.i686
glibc-langpack-ga-2.26-37.amzn2.i686
glibc-langpack-gd-2.26-37.amzn2.i686
glibc-langpack-gez-2.26-37.amzn2.i686
glibc-langpack-gl-2.26-37.amzn2.i686
glibc-langpack-gu-2.26-37.amzn2.i686
glibc-langpack-gv-2.26-37.amzn2.i686
glibc-langpack-ha-2.26-37.amzn2.i686
glibc-langpack-hak-2.26-37.amzn2.i686
glibc-langpack-he-2.26-37.amzn2.i686
glibc-langpack-hi-2.26-37.amzn2.i686
glibc-langpack-hne-2.26-37.amzn2.i686
glibc-langpack-hr-2.26-37.amzn2.i686
glibc-langpack-hsb-2.26-37.amzn2.i686
glibc-langpack-ht-2.26-37.amzn2.i686
glibc-langpack-hu-2.26-37.amzn2.i686
glibc-langpack-hy-2.26-37.amzn2.i686
glibc-langpack-ia-2.26-37.amzn2.i686
glibc-langpack-id-2.26-37.amzn2.i686
glibc-langpack-ig-2.26-37.amzn2.i686
glibc-langpack-ik-2.26-37.amzn2.i686
glibc-langpack-is-2.26-37.amzn2.i686
glibc-langpack-it-2.26-37.amzn2.i686
glibc-langpack-iu-2.26-37.amzn2.i686
glibc-langpack-ja-2.26-37.amzn2.i686
glibc-langpack-ka-2.26-37.amzn2.i686
glibc-langpack-kk-2.26-37.amzn2.i686
glibc-langpack-kl-2.26-37.amzn2.i686
glibc-langpack-km-2.26-37.amzn2.i686
glibc-langpack-kn-2.26-37.amzn2.i686
glibc-langpack-ko-2.26-37.amzn2.i686
glibc-langpack-kok-2.26-37.amzn2.i686
glibc-langpack-ks-2.26-37.amzn2.i686
glibc-langpack-ku-2.26-37.amzn2.i686
glibc-langpack-kw-2.26-37.amzn2.i686
glibc-langpack-ky-2.26-37.amzn2.i686
glibc-langpack-lb-2.26-37.amzn2.i686
glibc-langpack-lg-2.26-37.amzn2.i686
glibc-langpack-li-2.26-37.amzn2.i686
glibc-langpack-lij-2.26-37.amzn2.i686
glibc-langpack-ln-2.26-37.amzn2.i686
glibc-langpack-lo-2.26-37.amzn2.i686
glibc-langpack-lt-2.26-37.amzn2.i686
glibc-langpack-lv-2.26-37.amzn2.i686
glibc-langpack-lzh-2.26-37.amzn2.i686
glibc-langpack-mag-2.26-37.amzn2.i686
glibc-langpack-mai-2.26-37.amzn2.i686
glibc-langpack-mg-2.26-37.amzn2.i686
glibc-langpack-mhr-2.26-37.amzn2.i686
glibc-langpack-mi-2.26-37.amzn2.i686
glibc-langpack-mk-2.26-37.amzn2.i686
glibc-langpack-ml-2.26-37.amzn2.i686
glibc-langpack-mn-2.26-37.amzn2.i686
glibc-langpack-mni-2.26-37.amzn2.i686
glibc-langpack-mr-2.26-37.amzn2.i686
glibc-langpack-ms-2.26-37.amzn2.i686
glibc-langpack-mt-2.26-37.amzn2.i686
glibc-langpack-my-2.26-37.amzn2.i686
glibc-langpack-nan-2.26-37.amzn2.i686
glibc-langpack-nb-2.26-37.amzn2.i686
glibc-langpack-nds-2.26-37.amzn2.i686
glibc-langpack-ne-2.26-37.amzn2.i686
glibc-langpack-nhn-2.26-37.amzn2.i686
glibc-langpack-niu-2.26-37.amzn2.i686
glibc-langpack-nl-2.26-37.amzn2.i686
glibc-langpack-nn-2.26-37.amzn2.i686
glibc-langpack-nr-2.26-37.amzn2.i686
glibc-langpack-nso-2.26-37.amzn2.i686
glibc-langpack-oc-2.26-37.amzn2.i686
glibc-langpack-om-2.26-37.amzn2.i686
glibc-langpack-or-2.26-37.amzn2.i686
glibc-langpack-os-2.26-37.amzn2.i686
glibc-langpack-pa-2.26-37.amzn2.i686
glibc-langpack-pap-2.26-37.amzn2.i686
glibc-langpack-pl-2.26-37.amzn2.i686
glibc-langpack-ps-2.26-37.amzn2.i686
glibc-langpack-pt-2.26-37.amzn2.i686
glibc-langpack-quz-2.26-37.amzn2.i686
glibc-langpack-raj-2.26-37.amzn2.i686
glibc-langpack-ro-2.26-37.amzn2.i686
glibc-langpack-ru-2.26-37.amzn2.i686
glibc-langpack-rw-2.26-37.amzn2.i686
glibc-langpack-sa-2.26-37.amzn2.i686
glibc-langpack-sat-2.26-37.amzn2.i686
glibc-langpack-sc-2.26-37.amzn2.i686
glibc-langpack-sd-2.26-37.amzn2.i686
glibc-langpack-se-2.26-37.amzn2.i686
glibc-langpack-sgs-2.26-37.amzn2.i686
glibc-langpack-shs-2.26-37.amzn2.i686
glibc-langpack-si-2.26-37.amzn2.i686
glibc-langpack-sid-2.26-37.amzn2.i686
glibc-langpack-sk-2.26-37.amzn2.i686
glibc-langpack-sl-2.26-37.amzn2.i686
glibc-langpack-so-2.26-37.amzn2.i686
glibc-langpack-sq-2.26-37.amzn2.i686
glibc-langpack-sr-2.26-37.amzn2.i686
glibc-langpack-ss-2.26-37.amzn2.i686
glibc-langpack-st-2.26-37.amzn2.i686
glibc-langpack-sv-2.26-37.amzn2.i686
glibc-langpack-sw-2.26-37.amzn2.i686
glibc-langpack-szl-2.26-37.amzn2.i686
glibc-langpack-ta-2.26-37.amzn2.i686
glibc-langpack-tcy-2.26-37.amzn2.i686
glibc-langpack-te-2.26-37.amzn2.i686
glibc-langpack-tg-2.26-37.amzn2.i686
glibc-langpack-th-2.26-37.amzn2.i686
glibc-langpack-the-2.26-37.amzn2.i686
glibc-langpack-ti-2.26-37.amzn2.i686
glibc-langpack-tig-2.26-37.amzn2.i686
glibc-langpack-tk-2.26-37.amzn2.i686
glibc-langpack-tl-2.26-37.amzn2.i686
glibc-langpack-tn-2.26-37.amzn2.i686
glibc-langpack-tr-2.26-37.amzn2.i686
glibc-langpack-ts-2.26-37.amzn2.i686
glibc-langpack-tt-2.26-37.amzn2.i686
glibc-langpack-ug-2.26-37.amzn2.i686
glibc-langpack-uk-2.26-37.amzn2.i686
glibc-langpack-unm-2.26-37.amzn2.i686
glibc-langpack-ur-2.26-37.amzn2.i686
glibc-langpack-uz-2.26-37.amzn2.i686
glibc-langpack-ve-2.26-37.amzn2.i686
glibc-langpack-vi-2.26-37.amzn2.i686
glibc-langpack-wa-2.26-37.amzn2.i686
glibc-langpack-wae-2.26-37.amzn2.i686
glibc-langpack-wal-2.26-37.amzn2.i686
glibc-langpack-wo-2.26-37.amzn2.i686
glibc-langpack-xh-2.26-37.amzn2.i686
glibc-langpack-yi-2.26-37.amzn2.i686
glibc-langpack-yo-2.26-37.amzn2.i686
glibc-langpack-yue-2.26-37.amzn2.i686
glibc-langpack-zh-2.26-37.amzn2.i686
glibc-langpack-zu-2.26-37.amzn2.i686
glibc-all-langpacks-2.26-37.amzn2.i686
glibc-minimal-langpack-2.26-37.amzn2.i686
nscd-2.26-37.amzn2.i686
nss_db-2.26-37.amzn2.i686
nss_nis-2.26-37.amzn2.i686
nss_hesiod-2.26-37.amzn2.i686
glibc-nss-devel-2.26-37.amzn2.i686
glibc-utils-2.26-37.amzn2.i686
glibc-debuginfo-2.26-37.amzn2.i686
glibc-debuginfo-common-2.26-37.amzn2.i686
glibc-benchtests-2.26-37.amzn2.i686
src:
glibc-2.26-37.amzn2.src
x86_64:
glibc-2.26-37.amzn2.x86_64
libcrypt-2.26-37.amzn2.x86_64
libcrypt-nss-2.26-37.amzn2.x86_64
glibc-devel-2.26-37.amzn2.x86_64
glibc-static-2.26-37.amzn2.x86_64
glibc-headers-2.26-37.amzn2.x86_64
glibc-common-2.26-37.amzn2.x86_64
glibc-locale-source-2.26-37.amzn2.x86_64
glibc-langpack-eo-2.26-37.amzn2.x86_64
glibc-langpack-aa-2.26-37.amzn2.x86_64
glibc-langpack-af-2.26-37.amzn2.x86_64
glibc-langpack-ak-2.26-37.amzn2.x86_64
glibc-langpack-am-2.26-37.amzn2.x86_64
glibc-langpack-an-2.26-37.amzn2.x86_64
glibc-langpack-anp-2.26-37.amzn2.x86_64
glibc-langpack-ar-2.26-37.amzn2.x86_64
glibc-langpack-as-2.26-37.amzn2.x86_64
glibc-langpack-ast-2.26-37.amzn2.x86_64
glibc-langpack-ayc-2.26-37.amzn2.x86_64
glibc-langpack-az-2.26-37.amzn2.x86_64
glibc-langpack-be-2.26-37.amzn2.x86_64
glibc-langpack-bem-2.26-37.amzn2.x86_64
glibc-langpack-ber-2.26-37.amzn2.x86_64
glibc-langpack-bg-2.26-37.amzn2.x86_64
glibc-langpack-bhb-2.26-37.amzn2.x86_64
glibc-langpack-bho-2.26-37.amzn2.x86_64
glibc-langpack-bn-2.26-37.amzn2.x86_64
glibc-langpack-bo-2.26-37.amzn2.x86_64
glibc-langpack-br-2.26-37.amzn2.x86_64
glibc-langpack-brx-2.26-37.amzn2.x86_64
glibc-langpack-bs-2.26-37.amzn2.x86_64
glibc-langpack-byn-2.26-37.amzn2.x86_64
glibc-langpack-ca-2.26-37.amzn2.x86_64
glibc-langpack-ce-2.26-37.amzn2.x86_64
glibc-langpack-chr-2.26-37.amzn2.x86_64
glibc-langpack-cmn-2.26-37.amzn2.x86_64
glibc-langpack-crh-2.26-37.amzn2.x86_64
glibc-langpack-cs-2.26-37.amzn2.x86_64
glibc-langpack-csb-2.26-37.amzn2.x86_64
glibc-langpack-cv-2.26-37.amzn2.x86_64
glibc-langpack-cy-2.26-37.amzn2.x86_64
glibc-langpack-da-2.26-37.amzn2.x86_64
glibc-langpack-de-2.26-37.amzn2.x86_64
glibc-langpack-doi-2.26-37.amzn2.x86_64
glibc-langpack-dv-2.26-37.amzn2.x86_64
glibc-langpack-dz-2.26-37.amzn2.x86_64
glibc-langpack-el-2.26-37.amzn2.x86_64
glibc-langpack-en-2.26-37.amzn2.x86_64
glibc-langpack-es-2.26-37.amzn2.x86_64
glibc-langpack-et-2.26-37.amzn2.x86_64
glibc-langpack-eu-2.26-37.amzn2.x86_64
glibc-langpack-fa-2.26-37.amzn2.x86_64
glibc-langpack-ff-2.26-37.amzn2.x86_64
glibc-langpack-fi-2.26-37.amzn2.x86_64
glibc-langpack-fil-2.26-37.amzn2.x86_64
glibc-langpack-fo-2.26-37.amzn2.x86_64
glibc-langpack-fr-2.26-37.amzn2.x86_64
glibc-langpack-fur-2.26-37.amzn2.x86_64
glibc-langpack-fy-2.26-37.amzn2.x86_64
glibc-langpack-ga-2.26-37.amzn2.x86_64
glibc-langpack-gd-2.26-37.amzn2.x86_64
glibc-langpack-gez-2.26-37.amzn2.x86_64
glibc-langpack-gl-2.26-37.amzn2.x86_64
glibc-langpack-gu-2.26-37.amzn2.x86_64
glibc-langpack-gv-2.26-37.amzn2.x86_64
glibc-langpack-ha-2.26-37.amzn2.x86_64
glibc-langpack-hak-2.26-37.amzn2.x86_64
glibc-langpack-he-2.26-37.amzn2.x86_64
glibc-langpack-hi-2.26-37.amzn2.x86_64
glibc-langpack-hne-2.26-37.amzn2.x86_64
glibc-langpack-hr-2.26-37.amzn2.x86_64
nscd-2.26-37.amzn2.x86_64
glibc-langpack-hsb-2.26-37.amzn2.x86_64
glibc-langpack-ht-2.26-37.amzn2.x86_64
glibc-langpack-hu-2.26-37.amzn2.x86_64
glibc-langpack-hy-2.26-37.amzn2.x86_64
glibc-langpack-ia-2.26-37.amzn2.x86_64
glibc-langpack-id-2.26-37.amzn2.x86_64
glibc-langpack-ig-2.26-37.amzn2.x86_64
glibc-langpack-ik-2.26-37.amzn2.x86_64
glibc-langpack-is-2.26-37.amzn2.x86_64
glibc-langpack-it-2.26-37.amzn2.x86_64
glibc-langpack-iu-2.26-37.amzn2.x86_64
glibc-langpack-ja-2.26-37.amzn2.x86_64
glibc-langpack-ka-2.26-37.amzn2.x86_64
glibc-langpack-kk-2.26-37.amzn2.x86_64
glibc-langpack-kl-2.26-37.amzn2.x86_64
glibc-langpack-km-2.26-37.amzn2.x86_64
glibc-langpack-kn-2.26-37.amzn2.x86_64
glibc-langpack-ko-2.26-37.amzn2.x86_64
glibc-langpack-kok-2.26-37.amzn2.x86_64
glibc-langpack-ks-2.26-37.amzn2.x86_64
glibc-langpack-ku-2.26-37.amzn2.x86_64
glibc-langpack-kw-2.26-37.amzn2.x86_64
glibc-langpack-ky-2.26-37.amzn2.x86_64
glibc-langpack-lb-2.26-37.amzn2.x86_64
glibc-langpack-lg-2.26-37.amzn2.x86_64
glibc-langpack-li-2.26-37.amzn2.x86_64
glibc-langpack-lij-2.26-37.amzn2.x86_64
glibc-langpack-ln-2.26-37.amzn2.x86_64
glibc-langpack-lo-2.26-37.amzn2.x86_64
glibc-langpack-lt-2.26-37.amzn2.x86_64
glibc-langpack-lv-2.26-37.amzn2.x86_64
glibc-langpack-lzh-2.26-37.amzn2.x86_64
glibc-langpack-mag-2.26-37.amzn2.x86_64
glibc-langpack-mai-2.26-37.amzn2.x86_64
glibc-langpack-mg-2.26-37.amzn2.x86_64
glibc-langpack-mhr-2.26-37.amzn2.x86_64
glibc-langpack-mi-2.26-37.amzn2.x86_64
glibc-langpack-mk-2.26-37.amzn2.x86_64
glibc-langpack-ml-2.26-37.amzn2.x86_64
glibc-langpack-mn-2.26-37.amzn2.x86_64
glibc-langpack-mni-2.26-37.amzn2.x86_64
glibc-langpack-mr-2.26-37.amzn2.x86_64
glibc-langpack-ms-2.26-37.amzn2.x86_64
glibc-langpack-mt-2.26-37.amzn2.x86_64
glibc-langpack-my-2.26-37.amzn2.x86_64
glibc-langpack-nan-2.26-37.amzn2.x86_64
glibc-langpack-nb-2.26-37.amzn2.x86_64
glibc-langpack-nds-2.26-37.amzn2.x86_64
glibc-langpack-ne-2.26-37.amzn2.x86_64
glibc-langpack-nhn-2.26-37.amzn2.x86_64
glibc-langpack-niu-2.26-37.amzn2.x86_64
glibc-langpack-nl-2.26-37.amzn2.x86_64
glibc-langpack-nn-2.26-37.amzn2.x86_64
glibc-langpack-nr-2.26-37.amzn2.x86_64
glibc-langpack-nso-2.26-37.amzn2.x86_64
glibc-langpack-oc-2.26-37.amzn2.x86_64
glibc-langpack-om-2.26-37.amzn2.x86_64
glibc-langpack-or-2.26-37.amzn2.x86_64
glibc-langpack-os-2.26-37.amzn2.x86_64
glibc-langpack-pa-2.26-37.amzn2.x86_64
glibc-langpack-pap-2.26-37.amzn2.x86_64
glibc-langpack-pl-2.26-37.amzn2.x86_64
glibc-langpack-ps-2.26-37.amzn2.x86_64
glibc-langpack-pt-2.26-37.amzn2.x86_64
glibc-langpack-quz-2.26-37.amzn2.x86_64
glibc-langpack-raj-2.26-37.amzn2.x86_64
glibc-langpack-ro-2.26-37.amzn2.x86_64
glibc-langpack-ru-2.26-37.amzn2.x86_64
glibc-langpack-rw-2.26-37.amzn2.x86_64
glibc-langpack-sa-2.26-37.amzn2.x86_64
glibc-langpack-sat-2.26-37.amzn2.x86_64
glibc-langpack-sc-2.26-37.amzn2.x86_64
glibc-langpack-sd-2.26-37.amzn2.x86_64
glibc-langpack-se-2.26-37.amzn2.x86_64
glibc-langpack-sgs-2.26-37.amzn2.x86_64
glibc-langpack-shs-2.26-37.amzn2.x86_64
glibc-langpack-si-2.26-37.amzn2.x86_64
glibc-langpack-sid-2.26-37.amzn2.x86_64
glibc-langpack-sk-2.26-37.amzn2.x86_64
glibc-langpack-sl-2.26-37.amzn2.x86_64
glibc-langpack-so-2.26-37.amzn2.x86_64
glibc-langpack-sq-2.26-37.amzn2.x86_64
glibc-langpack-sr-2.26-37.amzn2.x86_64
glibc-langpack-ss-2.26-37.amzn2.x86_64
glibc-langpack-st-2.26-37.amzn2.x86_64
glibc-langpack-sv-2.26-37.amzn2.x86_64
glibc-langpack-sw-2.26-37.amzn2.x86_64
glibc-langpack-szl-2.26-37.amzn2.x86_64
glibc-langpack-ta-2.26-37.amzn2.x86_64
glibc-langpack-tcy-2.26-37.amzn2.x86_64
glibc-langpack-te-2.26-37.amzn2.x86_64
glibc-langpack-tg-2.26-37.amzn2.x86_64
glibc-langpack-th-2.26-37.amzn2.x86_64
glibc-langpack-the-2.26-37.amzn2.x86_64
glibc-langpack-ti-2.26-37.amzn2.x86_64
glibc-langpack-tig-2.26-37.amzn2.x86_64
glibc-langpack-tk-2.26-37.amzn2.x86_64
glibc-langpack-tl-2.26-37.amzn2.x86_64
glibc-langpack-tn-2.26-37.amzn2.x86_64
glibc-langpack-tr-2.26-37.amzn2.x86_64
glibc-langpack-ts-2.26-37.amzn2.x86_64
glibc-langpack-tt-2.26-37.amzn2.x86_64
glibc-langpack-ug-2.26-37.amzn2.x86_64
glibc-langpack-uk-2.26-37.amzn2.x86_64
glibc-langpack-unm-2.26-37.amzn2.x86_64
glibc-langpack-ur-2.26-37.amzn2.x86_64
glibc-langpack-uz-2.26-37.amzn2.x86_64
glibc-langpack-ve-2.26-37.amzn2.x86_64
glibc-langpack-vi-2.26-37.amzn2.x86_64
glibc-langpack-wa-2.26-37.amzn2.x86_64
glibc-langpack-wae-2.26-37.amzn2.x86_64
glibc-langpack-wal-2.26-37.amzn2.x86_64
glibc-langpack-wo-2.26-37.amzn2.x86_64
glibc-langpack-xh-2.26-37.amzn2.x86_64
glibc-langpack-yi-2.26-37.amzn2.x86_64
glibc-langpack-yo-2.26-37.amzn2.x86_64
glibc-langpack-yue-2.26-37.amzn2.x86_64
glibc-langpack-zh-2.26-37.amzn2.x86_64
glibc-langpack-zu-2.26-37.amzn2.x86_64
glibc-all-langpacks-2.26-37.amzn2.x86_64
glibc-minimal-langpack-2.26-37.amzn2.x86_64
nss_db-2.26-37.amzn2.x86_64
nss_nis-2.26-37.amzn2.x86_64
nss_hesiod-2.26-37.amzn2.x86_64
glibc-nss-devel-2.26-37.amzn2.x86_64
glibc-utils-2.26-37.amzn2.x86_64
glibc-debuginfo-2.26-37.amzn2.x86_64
glibc-debuginfo-common-2.26-37.amzn2.x86_64
glibc-benchtests-2.26-37.amzn2.x86_64
Red Hat: CVE-2019-19126, CVE-2020-10029, CVE-2020-1752
Mitre: CVE-2019-19126, CVE-2020-10029, CVE-2020-1752
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Amazon Linux | 2 | aarch64 | glibc | < 2.26-37.amzn2 | glibc-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | libcrypt | < 2.26-37.amzn2 | libcrypt-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | libcrypt-nss | < 2.26-37.amzn2 | libcrypt-nss-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-devel | < 2.26-37.amzn2 | glibc-devel-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-static | < 2.26-37.amzn2 | glibc-static-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-headers | < 2.26-37.amzn2 | glibc-headers-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-common | < 2.26-37.amzn2 | glibc-common-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-locale-source | < 2.26-37.amzn2 | glibc-locale-source-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-langpack-eo | < 2.26-37.amzn2 | glibc-langpack-eo-2.26-37.amzn2.aarch64.rpm |
Amazon Linux | 2 | aarch64 | glibc-langpack-aa | < 2.26-37.amzn2 | glibc-langpack-aa-2.26-37.amzn2.aarch64.rpm |
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
44.2%