Lucene search

K
amazonAmazonALAS2-2023-2221
HistoryAug 21, 2023 - 10:35 a.m.

Medium: glibc

2023-08-2110:35:00
alas.aws.amazon.com
10
glibc
vulnerability
memory usage
stack corruption
arbitrary code execution
cve-2019-19126
cve-2020-10029
cve-2020-1752

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

44.9%

Issue Overview:

A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable. (CVE-2019-19126)

A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability. (CVE-2020-10029)

A use-after-free vulnerability was found in glibc in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. (CVE-2020-1752)

Affected Packages:

glibc

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update glibc to update your system.

New Packages:

aarch64:  
    glibc-2.26-37.amzn2.aarch64  
    libcrypt-2.26-37.amzn2.aarch64  
    libcrypt-nss-2.26-37.amzn2.aarch64  
    glibc-devel-2.26-37.amzn2.aarch64  
    glibc-static-2.26-37.amzn2.aarch64  
    glibc-headers-2.26-37.amzn2.aarch64  
    glibc-common-2.26-37.amzn2.aarch64  
    glibc-locale-source-2.26-37.amzn2.aarch64  
    glibc-langpack-eo-2.26-37.amzn2.aarch64  
    glibc-langpack-aa-2.26-37.amzn2.aarch64  
    glibc-langpack-af-2.26-37.amzn2.aarch64  
    glibc-langpack-ak-2.26-37.amzn2.aarch64  
    glibc-langpack-am-2.26-37.amzn2.aarch64  
    glibc-langpack-an-2.26-37.amzn2.aarch64  
    glibc-langpack-anp-2.26-37.amzn2.aarch64  
    glibc-langpack-ar-2.26-37.amzn2.aarch64  
    glibc-langpack-as-2.26-37.amzn2.aarch64  
    glibc-langpack-ast-2.26-37.amzn2.aarch64  
    glibc-langpack-ayc-2.26-37.amzn2.aarch64  
    glibc-langpack-az-2.26-37.amzn2.aarch64  
    glibc-langpack-be-2.26-37.amzn2.aarch64  
    glibc-langpack-bem-2.26-37.amzn2.aarch64  
    glibc-langpack-ber-2.26-37.amzn2.aarch64  
    glibc-langpack-bg-2.26-37.amzn2.aarch64  
    glibc-langpack-bhb-2.26-37.amzn2.aarch64  
    glibc-langpack-bho-2.26-37.amzn2.aarch64  
    glibc-langpack-bn-2.26-37.amzn2.aarch64  
    glibc-langpack-bo-2.26-37.amzn2.aarch64  
    glibc-langpack-br-2.26-37.amzn2.aarch64  
    glibc-langpack-brx-2.26-37.amzn2.aarch64  
    glibc-langpack-bs-2.26-37.amzn2.aarch64  
    glibc-langpack-byn-2.26-37.amzn2.aarch64  
    glibc-langpack-ca-2.26-37.amzn2.aarch64  
    glibc-langpack-ce-2.26-37.amzn2.aarch64  
    glibc-langpack-chr-2.26-37.amzn2.aarch64  
    glibc-langpack-cmn-2.26-37.amzn2.aarch64  
    glibc-langpack-crh-2.26-37.amzn2.aarch64  
    glibc-langpack-cs-2.26-37.amzn2.aarch64  
    glibc-langpack-csb-2.26-37.amzn2.aarch64  
    glibc-langpack-cv-2.26-37.amzn2.aarch64  
    glibc-langpack-cy-2.26-37.amzn2.aarch64  
    glibc-langpack-da-2.26-37.amzn2.aarch64  
    glibc-langpack-de-2.26-37.amzn2.aarch64  
    glibc-langpack-doi-2.26-37.amzn2.aarch64  
    glibc-langpack-dv-2.26-37.amzn2.aarch64  
    glibc-langpack-dz-2.26-37.amzn2.aarch64  
    glibc-langpack-el-2.26-37.amzn2.aarch64  
    glibc-langpack-en-2.26-37.amzn2.aarch64  
    glibc-langpack-es-2.26-37.amzn2.aarch64  
    glibc-langpack-et-2.26-37.amzn2.aarch64  
    glibc-langpack-eu-2.26-37.amzn2.aarch64  
    glibc-langpack-fa-2.26-37.amzn2.aarch64  
    glibc-langpack-ff-2.26-37.amzn2.aarch64  
    glibc-langpack-fi-2.26-37.amzn2.aarch64  
    glibc-langpack-fil-2.26-37.amzn2.aarch64  
    glibc-langpack-fo-2.26-37.amzn2.aarch64  
    glibc-langpack-fr-2.26-37.amzn2.aarch64  
    glibc-langpack-fur-2.26-37.amzn2.aarch64  
    glibc-langpack-fy-2.26-37.amzn2.aarch64  
    glibc-langpack-ga-2.26-37.amzn2.aarch64  
    glibc-langpack-gd-2.26-37.amzn2.aarch64  
    glibc-langpack-gez-2.26-37.amzn2.aarch64  
    glibc-langpack-gl-2.26-37.amzn2.aarch64  
    glibc-langpack-gu-2.26-37.amzn2.aarch64  
    glibc-langpack-gv-2.26-37.amzn2.aarch64  
    glibc-langpack-ha-2.26-37.amzn2.aarch64  
    glibc-langpack-hak-2.26-37.amzn2.aarch64  
    glibc-langpack-he-2.26-37.amzn2.aarch64  
    glibc-langpack-hi-2.26-37.amzn2.aarch64  
    glibc-langpack-hne-2.26-37.amzn2.aarch64  
    glibc-langpack-hr-2.26-37.amzn2.aarch64  
    glibc-langpack-hsb-2.26-37.amzn2.aarch64  
    glibc-langpack-ht-2.26-37.amzn2.aarch64  
    glibc-langpack-hu-2.26-37.amzn2.aarch64  
    glibc-langpack-hy-2.26-37.amzn2.aarch64  
    glibc-langpack-ia-2.26-37.amzn2.aarch64  
    glibc-langpack-id-2.26-37.amzn2.aarch64  
    glibc-langpack-ig-2.26-37.amzn2.aarch64  
    glibc-langpack-ik-2.26-37.amzn2.aarch64  
    glibc-langpack-is-2.26-37.amzn2.aarch64  
    glibc-langpack-it-2.26-37.amzn2.aarch64  
    glibc-langpack-iu-2.26-37.amzn2.aarch64  
    glibc-langpack-ja-2.26-37.amzn2.aarch64  
    glibc-langpack-ka-2.26-37.amzn2.aarch64  
    glibc-langpack-kk-2.26-37.amzn2.aarch64  
    glibc-langpack-kl-2.26-37.amzn2.aarch64  
    glibc-langpack-km-2.26-37.amzn2.aarch64  
    glibc-langpack-kn-2.26-37.amzn2.aarch64  
    glibc-langpack-ko-2.26-37.amzn2.aarch64  
    glibc-langpack-kok-2.26-37.amzn2.aarch64  
    glibc-langpack-ks-2.26-37.amzn2.aarch64  
    glibc-langpack-ku-2.26-37.amzn2.aarch64  
    glibc-langpack-kw-2.26-37.amzn2.aarch64  
    glibc-langpack-ky-2.26-37.amzn2.aarch64  
    glibc-langpack-lb-2.26-37.amzn2.aarch64  
    glibc-langpack-lg-2.26-37.amzn2.aarch64  
    glibc-langpack-li-2.26-37.amzn2.aarch64  
    glibc-langpack-lij-2.26-37.amzn2.aarch64  
    glibc-langpack-ln-2.26-37.amzn2.aarch64  
    glibc-langpack-lo-2.26-37.amzn2.aarch64  
    glibc-langpack-lt-2.26-37.amzn2.aarch64  
    glibc-langpack-lv-2.26-37.amzn2.aarch64  
    glibc-langpack-lzh-2.26-37.amzn2.aarch64  
    glibc-langpack-mag-2.26-37.amzn2.aarch64  
    glibc-langpack-mai-2.26-37.amzn2.aarch64  
    glibc-langpack-mg-2.26-37.amzn2.aarch64  
    glibc-langpack-mhr-2.26-37.amzn2.aarch64  
    glibc-langpack-mi-2.26-37.amzn2.aarch64  
    glibc-langpack-mk-2.26-37.amzn2.aarch64  
    glibc-langpack-ml-2.26-37.amzn2.aarch64  
    glibc-langpack-mn-2.26-37.amzn2.aarch64  
    glibc-langpack-mni-2.26-37.amzn2.aarch64  
    glibc-langpack-mr-2.26-37.amzn2.aarch64  
    glibc-langpack-ms-2.26-37.amzn2.aarch64  
    glibc-langpack-mt-2.26-37.amzn2.aarch64  
    glibc-langpack-my-2.26-37.amzn2.aarch64  
    glibc-langpack-nan-2.26-37.amzn2.aarch64  
    glibc-langpack-nb-2.26-37.amzn2.aarch64  
    glibc-langpack-nds-2.26-37.amzn2.aarch64  
    glibc-langpack-ne-2.26-37.amzn2.aarch64  
    glibc-langpack-nhn-2.26-37.amzn2.aarch64  
    glibc-langpack-niu-2.26-37.amzn2.aarch64  
    glibc-langpack-nl-2.26-37.amzn2.aarch64  
    glibc-langpack-nn-2.26-37.amzn2.aarch64  
    glibc-langpack-nr-2.26-37.amzn2.aarch64  
    glibc-langpack-nso-2.26-37.amzn2.aarch64  
    glibc-langpack-oc-2.26-37.amzn2.aarch64  
    glibc-langpack-om-2.26-37.amzn2.aarch64  
    glibc-langpack-or-2.26-37.amzn2.aarch64  
    glibc-langpack-os-2.26-37.amzn2.aarch64  
    glibc-langpack-pa-2.26-37.amzn2.aarch64  
    glibc-langpack-pap-2.26-37.amzn2.aarch64  
    glibc-langpack-pl-2.26-37.amzn2.aarch64  
    glibc-langpack-ps-2.26-37.amzn2.aarch64  
    glibc-langpack-pt-2.26-37.amzn2.aarch64  
    glibc-langpack-quz-2.26-37.amzn2.aarch64  
    glibc-langpack-raj-2.26-37.amzn2.aarch64  
    glibc-langpack-ro-2.26-37.amzn2.aarch64  
    glibc-langpack-ru-2.26-37.amzn2.aarch64  
    glibc-langpack-rw-2.26-37.amzn2.aarch64  
    glibc-langpack-sa-2.26-37.amzn2.aarch64  
    glibc-langpack-sat-2.26-37.amzn2.aarch64  
    glibc-langpack-sc-2.26-37.amzn2.aarch64  
    glibc-langpack-sd-2.26-37.amzn2.aarch64  
    glibc-langpack-se-2.26-37.amzn2.aarch64  
    glibc-langpack-sgs-2.26-37.amzn2.aarch64  
    glibc-langpack-shs-2.26-37.amzn2.aarch64  
    glibc-langpack-si-2.26-37.amzn2.aarch64  
    glibc-langpack-sid-2.26-37.amzn2.aarch64  
    glibc-langpack-sk-2.26-37.amzn2.aarch64  
    glibc-langpack-sl-2.26-37.amzn2.aarch64  
    glibc-langpack-so-2.26-37.amzn2.aarch64  
    glibc-langpack-sq-2.26-37.amzn2.aarch64  
    glibc-langpack-sr-2.26-37.amzn2.aarch64  
    glibc-langpack-ss-2.26-37.amzn2.aarch64  
    glibc-langpack-st-2.26-37.amzn2.aarch64  
    glibc-langpack-sv-2.26-37.amzn2.aarch64  
    glibc-langpack-sw-2.26-37.amzn2.aarch64  
    glibc-langpack-szl-2.26-37.amzn2.aarch64  
    glibc-langpack-ta-2.26-37.amzn2.aarch64  
    glibc-langpack-tcy-2.26-37.amzn2.aarch64  
    glibc-langpack-te-2.26-37.amzn2.aarch64  
    glibc-langpack-tg-2.26-37.amzn2.aarch64  
    glibc-langpack-th-2.26-37.amzn2.aarch64  
    glibc-langpack-the-2.26-37.amzn2.aarch64  
    glibc-langpack-ti-2.26-37.amzn2.aarch64  
    glibc-langpack-tig-2.26-37.amzn2.aarch64  
    glibc-langpack-tk-2.26-37.amzn2.aarch64  
    glibc-langpack-tl-2.26-37.amzn2.aarch64  
    glibc-langpack-tn-2.26-37.amzn2.aarch64  
    glibc-langpack-tr-2.26-37.amzn2.aarch64  
    glibc-langpack-ts-2.26-37.amzn2.aarch64  
    glibc-langpack-tt-2.26-37.amzn2.aarch64  
    glibc-langpack-ug-2.26-37.amzn2.aarch64  
    glibc-langpack-uk-2.26-37.amzn2.aarch64  
    glibc-langpack-unm-2.26-37.amzn2.aarch64  
    glibc-langpack-ur-2.26-37.amzn2.aarch64  
    glibc-langpack-uz-2.26-37.amzn2.aarch64  
    glibc-langpack-ve-2.26-37.amzn2.aarch64  
    glibc-langpack-vi-2.26-37.amzn2.aarch64  
    glibc-langpack-wa-2.26-37.amzn2.aarch64  
    glibc-langpack-wae-2.26-37.amzn2.aarch64  
    glibc-langpack-wal-2.26-37.amzn2.aarch64  
    glibc-langpack-wo-2.26-37.amzn2.aarch64  
    glibc-langpack-xh-2.26-37.amzn2.aarch64  
    glibc-langpack-yi-2.26-37.amzn2.aarch64  
    glibc-langpack-yo-2.26-37.amzn2.aarch64  
    glibc-langpack-yue-2.26-37.amzn2.aarch64  
    glibc-langpack-zh-2.26-37.amzn2.aarch64  
    glibc-langpack-zu-2.26-37.amzn2.aarch64  
    glibc-all-langpacks-2.26-37.amzn2.aarch64  
    glibc-minimal-langpack-2.26-37.amzn2.aarch64  
    nscd-2.26-37.amzn2.aarch64  
    nss_db-2.26-37.amzn2.aarch64  
    nss_nis-2.26-37.amzn2.aarch64  
    nss_hesiod-2.26-37.amzn2.aarch64  
    glibc-nss-devel-2.26-37.amzn2.aarch64  
    glibc-utils-2.26-37.amzn2.aarch64  
    glibc-debuginfo-2.26-37.amzn2.aarch64  
    glibc-benchtests-2.26-37.amzn2.aarch64  
  
i686:  
    glibc-2.26-37.amzn2.i686  
    libcrypt-2.26-37.amzn2.i686  
    libcrypt-nss-2.26-37.amzn2.i686  
    glibc-devel-2.26-37.amzn2.i686  
    glibc-static-2.26-37.amzn2.i686  
    glibc-headers-2.26-37.amzn2.i686  
    glibc-common-2.26-37.amzn2.i686  
    glibc-locale-source-2.26-37.amzn2.i686  
    glibc-langpack-eo-2.26-37.amzn2.i686  
    glibc-langpack-aa-2.26-37.amzn2.i686  
    glibc-langpack-af-2.26-37.amzn2.i686  
    glibc-langpack-ak-2.26-37.amzn2.i686  
    glibc-langpack-am-2.26-37.amzn2.i686  
    glibc-langpack-an-2.26-37.amzn2.i686  
    glibc-langpack-anp-2.26-37.amzn2.i686  
    glibc-langpack-ar-2.26-37.amzn2.i686  
    glibc-langpack-as-2.26-37.amzn2.i686  
    glibc-langpack-ast-2.26-37.amzn2.i686  
    glibc-langpack-ayc-2.26-37.amzn2.i686  
    glibc-langpack-az-2.26-37.amzn2.i686  
    glibc-langpack-be-2.26-37.amzn2.i686  
    glibc-langpack-bem-2.26-37.amzn2.i686  
    glibc-langpack-ber-2.26-37.amzn2.i686  
    glibc-langpack-bg-2.26-37.amzn2.i686  
    glibc-langpack-bhb-2.26-37.amzn2.i686  
    glibc-langpack-bho-2.26-37.amzn2.i686  
    glibc-langpack-bn-2.26-37.amzn2.i686  
    glibc-langpack-bo-2.26-37.amzn2.i686  
    glibc-langpack-br-2.26-37.amzn2.i686  
    glibc-langpack-brx-2.26-37.amzn2.i686  
    glibc-langpack-bs-2.26-37.amzn2.i686  
    glibc-langpack-byn-2.26-37.amzn2.i686  
    glibc-langpack-ca-2.26-37.amzn2.i686  
    glibc-langpack-ce-2.26-37.amzn2.i686  
    glibc-langpack-chr-2.26-37.amzn2.i686  
    glibc-langpack-cmn-2.26-37.amzn2.i686  
    glibc-langpack-crh-2.26-37.amzn2.i686  
    glibc-langpack-cs-2.26-37.amzn2.i686  
    glibc-langpack-csb-2.26-37.amzn2.i686  
    glibc-langpack-cv-2.26-37.amzn2.i686  
    glibc-langpack-cy-2.26-37.amzn2.i686  
    glibc-langpack-da-2.26-37.amzn2.i686  
    glibc-langpack-de-2.26-37.amzn2.i686  
    glibc-langpack-doi-2.26-37.amzn2.i686  
    glibc-langpack-dv-2.26-37.amzn2.i686  
    glibc-langpack-dz-2.26-37.amzn2.i686  
    glibc-langpack-el-2.26-37.amzn2.i686  
    glibc-langpack-en-2.26-37.amzn2.i686  
    glibc-langpack-es-2.26-37.amzn2.i686  
    glibc-langpack-et-2.26-37.amzn2.i686  
    glibc-langpack-eu-2.26-37.amzn2.i686  
    glibc-langpack-fa-2.26-37.amzn2.i686  
    glibc-langpack-ff-2.26-37.amzn2.i686  
    glibc-langpack-fi-2.26-37.amzn2.i686  
    glibc-langpack-fil-2.26-37.amzn2.i686  
    glibc-langpack-fo-2.26-37.amzn2.i686  
    glibc-langpack-fr-2.26-37.amzn2.i686  
    glibc-langpack-fur-2.26-37.amzn2.i686  
    glibc-langpack-fy-2.26-37.amzn2.i686  
    glibc-langpack-ga-2.26-37.amzn2.i686  
    glibc-langpack-gd-2.26-37.amzn2.i686  
    glibc-langpack-gez-2.26-37.amzn2.i686  
    glibc-langpack-gl-2.26-37.amzn2.i686  
    glibc-langpack-gu-2.26-37.amzn2.i686  
    glibc-langpack-gv-2.26-37.amzn2.i686  
    glibc-langpack-ha-2.26-37.amzn2.i686  
    glibc-langpack-hak-2.26-37.amzn2.i686  
    glibc-langpack-he-2.26-37.amzn2.i686  
    glibc-langpack-hi-2.26-37.amzn2.i686  
    glibc-langpack-hne-2.26-37.amzn2.i686  
    glibc-langpack-hr-2.26-37.amzn2.i686  
    glibc-langpack-hsb-2.26-37.amzn2.i686  
    glibc-langpack-ht-2.26-37.amzn2.i686  
    glibc-langpack-hu-2.26-37.amzn2.i686  
    glibc-langpack-hy-2.26-37.amzn2.i686  
    glibc-langpack-ia-2.26-37.amzn2.i686  
    glibc-langpack-id-2.26-37.amzn2.i686  
    glibc-langpack-ig-2.26-37.amzn2.i686  
    glibc-langpack-ik-2.26-37.amzn2.i686  
    glibc-langpack-is-2.26-37.amzn2.i686  
    glibc-langpack-it-2.26-37.amzn2.i686  
    glibc-langpack-iu-2.26-37.amzn2.i686  
    glibc-langpack-ja-2.26-37.amzn2.i686  
    glibc-langpack-ka-2.26-37.amzn2.i686  
    glibc-langpack-kk-2.26-37.amzn2.i686  
    glibc-langpack-kl-2.26-37.amzn2.i686  
    glibc-langpack-km-2.26-37.amzn2.i686  
    glibc-langpack-kn-2.26-37.amzn2.i686  
    glibc-langpack-ko-2.26-37.amzn2.i686  
    glibc-langpack-kok-2.26-37.amzn2.i686  
    glibc-langpack-ks-2.26-37.amzn2.i686  
    glibc-langpack-ku-2.26-37.amzn2.i686  
    glibc-langpack-kw-2.26-37.amzn2.i686  
    glibc-langpack-ky-2.26-37.amzn2.i686  
    glibc-langpack-lb-2.26-37.amzn2.i686  
    glibc-langpack-lg-2.26-37.amzn2.i686  
    glibc-langpack-li-2.26-37.amzn2.i686  
    glibc-langpack-lij-2.26-37.amzn2.i686  
    glibc-langpack-ln-2.26-37.amzn2.i686  
    glibc-langpack-lo-2.26-37.amzn2.i686  
    glibc-langpack-lt-2.26-37.amzn2.i686  
    glibc-langpack-lv-2.26-37.amzn2.i686  
    glibc-langpack-lzh-2.26-37.amzn2.i686  
    glibc-langpack-mag-2.26-37.amzn2.i686  
    glibc-langpack-mai-2.26-37.amzn2.i686  
    glibc-langpack-mg-2.26-37.amzn2.i686  
    glibc-langpack-mhr-2.26-37.amzn2.i686  
    glibc-langpack-mi-2.26-37.amzn2.i686  
    glibc-langpack-mk-2.26-37.amzn2.i686  
    glibc-langpack-ml-2.26-37.amzn2.i686  
    glibc-langpack-mn-2.26-37.amzn2.i686  
    glibc-langpack-mni-2.26-37.amzn2.i686  
    glibc-langpack-mr-2.26-37.amzn2.i686  
    glibc-langpack-ms-2.26-37.amzn2.i686  
    glibc-langpack-mt-2.26-37.amzn2.i686  
    glibc-langpack-my-2.26-37.amzn2.i686  
    glibc-langpack-nan-2.26-37.amzn2.i686  
    glibc-langpack-nb-2.26-37.amzn2.i686  
    glibc-langpack-nds-2.26-37.amzn2.i686  
    glibc-langpack-ne-2.26-37.amzn2.i686  
    glibc-langpack-nhn-2.26-37.amzn2.i686  
    glibc-langpack-niu-2.26-37.amzn2.i686  
    glibc-langpack-nl-2.26-37.amzn2.i686  
    glibc-langpack-nn-2.26-37.amzn2.i686  
    glibc-langpack-nr-2.26-37.amzn2.i686  
    glibc-langpack-nso-2.26-37.amzn2.i686  
    glibc-langpack-oc-2.26-37.amzn2.i686  
    glibc-langpack-om-2.26-37.amzn2.i686  
    glibc-langpack-or-2.26-37.amzn2.i686  
    glibc-langpack-os-2.26-37.amzn2.i686  
    glibc-langpack-pa-2.26-37.amzn2.i686  
    glibc-langpack-pap-2.26-37.amzn2.i686  
    glibc-langpack-pl-2.26-37.amzn2.i686  
    glibc-langpack-ps-2.26-37.amzn2.i686  
    glibc-langpack-pt-2.26-37.amzn2.i686  
    glibc-langpack-quz-2.26-37.amzn2.i686  
    glibc-langpack-raj-2.26-37.amzn2.i686  
    glibc-langpack-ro-2.26-37.amzn2.i686  
    glibc-langpack-ru-2.26-37.amzn2.i686  
    glibc-langpack-rw-2.26-37.amzn2.i686  
    glibc-langpack-sa-2.26-37.amzn2.i686  
    glibc-langpack-sat-2.26-37.amzn2.i686  
    glibc-langpack-sc-2.26-37.amzn2.i686  
    glibc-langpack-sd-2.26-37.amzn2.i686  
    glibc-langpack-se-2.26-37.amzn2.i686  
    glibc-langpack-sgs-2.26-37.amzn2.i686  
    glibc-langpack-shs-2.26-37.amzn2.i686  
    glibc-langpack-si-2.26-37.amzn2.i686  
    glibc-langpack-sid-2.26-37.amzn2.i686  
    glibc-langpack-sk-2.26-37.amzn2.i686  
    glibc-langpack-sl-2.26-37.amzn2.i686  
    glibc-langpack-so-2.26-37.amzn2.i686  
    glibc-langpack-sq-2.26-37.amzn2.i686  
    glibc-langpack-sr-2.26-37.amzn2.i686  
    glibc-langpack-ss-2.26-37.amzn2.i686  
    glibc-langpack-st-2.26-37.amzn2.i686  
    glibc-langpack-sv-2.26-37.amzn2.i686  
    glibc-langpack-sw-2.26-37.amzn2.i686  
    glibc-langpack-szl-2.26-37.amzn2.i686  
    glibc-langpack-ta-2.26-37.amzn2.i686  
    glibc-langpack-tcy-2.26-37.amzn2.i686  
    glibc-langpack-te-2.26-37.amzn2.i686  
    glibc-langpack-tg-2.26-37.amzn2.i686  
    glibc-langpack-th-2.26-37.amzn2.i686  
    glibc-langpack-the-2.26-37.amzn2.i686  
    glibc-langpack-ti-2.26-37.amzn2.i686  
    glibc-langpack-tig-2.26-37.amzn2.i686  
    glibc-langpack-tk-2.26-37.amzn2.i686  
    glibc-langpack-tl-2.26-37.amzn2.i686  
    glibc-langpack-tn-2.26-37.amzn2.i686  
    glibc-langpack-tr-2.26-37.amzn2.i686  
    glibc-langpack-ts-2.26-37.amzn2.i686  
    glibc-langpack-tt-2.26-37.amzn2.i686  
    glibc-langpack-ug-2.26-37.amzn2.i686  
    glibc-langpack-uk-2.26-37.amzn2.i686  
    glibc-langpack-unm-2.26-37.amzn2.i686  
    glibc-langpack-ur-2.26-37.amzn2.i686  
    glibc-langpack-uz-2.26-37.amzn2.i686  
    glibc-langpack-ve-2.26-37.amzn2.i686  
    glibc-langpack-vi-2.26-37.amzn2.i686  
    glibc-langpack-wa-2.26-37.amzn2.i686  
    glibc-langpack-wae-2.26-37.amzn2.i686  
    glibc-langpack-wal-2.26-37.amzn2.i686  
    glibc-langpack-wo-2.26-37.amzn2.i686  
    glibc-langpack-xh-2.26-37.amzn2.i686  
    glibc-langpack-yi-2.26-37.amzn2.i686  
    glibc-langpack-yo-2.26-37.amzn2.i686  
    glibc-langpack-yue-2.26-37.amzn2.i686  
    glibc-langpack-zh-2.26-37.amzn2.i686  
    glibc-langpack-zu-2.26-37.amzn2.i686  
    glibc-all-langpacks-2.26-37.amzn2.i686  
    glibc-minimal-langpack-2.26-37.amzn2.i686  
    nscd-2.26-37.amzn2.i686  
    nss_db-2.26-37.amzn2.i686  
    nss_nis-2.26-37.amzn2.i686  
    nss_hesiod-2.26-37.amzn2.i686  
    glibc-nss-devel-2.26-37.amzn2.i686  
    glibc-utils-2.26-37.amzn2.i686  
    glibc-debuginfo-2.26-37.amzn2.i686  
    glibc-debuginfo-common-2.26-37.amzn2.i686  
    glibc-benchtests-2.26-37.amzn2.i686  
  
src:  
    glibc-2.26-37.amzn2.src  
  
x86_64:  
    glibc-2.26-37.amzn2.x86_64  
    libcrypt-2.26-37.amzn2.x86_64  
    libcrypt-nss-2.26-37.amzn2.x86_64  
    glibc-devel-2.26-37.amzn2.x86_64  
    glibc-static-2.26-37.amzn2.x86_64  
    glibc-headers-2.26-37.amzn2.x86_64  
    glibc-common-2.26-37.amzn2.x86_64  
    glibc-locale-source-2.26-37.amzn2.x86_64  
    glibc-langpack-eo-2.26-37.amzn2.x86_64  
    glibc-langpack-aa-2.26-37.amzn2.x86_64  
    glibc-langpack-af-2.26-37.amzn2.x86_64  
    glibc-langpack-ak-2.26-37.amzn2.x86_64  
    glibc-langpack-am-2.26-37.amzn2.x86_64  
    glibc-langpack-an-2.26-37.amzn2.x86_64  
    glibc-langpack-anp-2.26-37.amzn2.x86_64  
    glibc-langpack-ar-2.26-37.amzn2.x86_64  
    glibc-langpack-as-2.26-37.amzn2.x86_64  
    glibc-langpack-ast-2.26-37.amzn2.x86_64  
    glibc-langpack-ayc-2.26-37.amzn2.x86_64  
    glibc-langpack-az-2.26-37.amzn2.x86_64  
    glibc-langpack-be-2.26-37.amzn2.x86_64  
    glibc-langpack-bem-2.26-37.amzn2.x86_64  
    glibc-langpack-ber-2.26-37.amzn2.x86_64  
    glibc-langpack-bg-2.26-37.amzn2.x86_64  
    glibc-langpack-bhb-2.26-37.amzn2.x86_64  
    glibc-langpack-bho-2.26-37.amzn2.x86_64  
    glibc-langpack-bn-2.26-37.amzn2.x86_64  
    glibc-langpack-bo-2.26-37.amzn2.x86_64  
    glibc-langpack-br-2.26-37.amzn2.x86_64  
    glibc-langpack-brx-2.26-37.amzn2.x86_64  
    glibc-langpack-bs-2.26-37.amzn2.x86_64  
    glibc-langpack-byn-2.26-37.amzn2.x86_64  
    glibc-langpack-ca-2.26-37.amzn2.x86_64  
    glibc-langpack-ce-2.26-37.amzn2.x86_64  
    glibc-langpack-chr-2.26-37.amzn2.x86_64  
    glibc-langpack-cmn-2.26-37.amzn2.x86_64  
    glibc-langpack-crh-2.26-37.amzn2.x86_64  
    glibc-langpack-cs-2.26-37.amzn2.x86_64  
    glibc-langpack-csb-2.26-37.amzn2.x86_64  
    glibc-langpack-cv-2.26-37.amzn2.x86_64  
    glibc-langpack-cy-2.26-37.amzn2.x86_64  
    glibc-langpack-da-2.26-37.amzn2.x86_64  
    glibc-langpack-de-2.26-37.amzn2.x86_64  
    glibc-langpack-doi-2.26-37.amzn2.x86_64  
    glibc-langpack-dv-2.26-37.amzn2.x86_64  
    glibc-langpack-dz-2.26-37.amzn2.x86_64  
    glibc-langpack-el-2.26-37.amzn2.x86_64  
    glibc-langpack-en-2.26-37.amzn2.x86_64  
    glibc-langpack-es-2.26-37.amzn2.x86_64  
    glibc-langpack-et-2.26-37.amzn2.x86_64  
    glibc-langpack-eu-2.26-37.amzn2.x86_64  
    glibc-langpack-fa-2.26-37.amzn2.x86_64  
    glibc-langpack-ff-2.26-37.amzn2.x86_64  
    glibc-langpack-fi-2.26-37.amzn2.x86_64  
    glibc-langpack-fil-2.26-37.amzn2.x86_64  
    glibc-langpack-fo-2.26-37.amzn2.x86_64  
    glibc-langpack-fr-2.26-37.amzn2.x86_64  
    glibc-langpack-fur-2.26-37.amzn2.x86_64  
    glibc-langpack-fy-2.26-37.amzn2.x86_64  
    glibc-langpack-ga-2.26-37.amzn2.x86_64  
    glibc-langpack-gd-2.26-37.amzn2.x86_64  
    glibc-langpack-gez-2.26-37.amzn2.x86_64  
    glibc-langpack-gl-2.26-37.amzn2.x86_64  
    glibc-langpack-gu-2.26-37.amzn2.x86_64  
    glibc-langpack-gv-2.26-37.amzn2.x86_64  
    glibc-langpack-ha-2.26-37.amzn2.x86_64  
    glibc-langpack-hak-2.26-37.amzn2.x86_64  
    glibc-langpack-he-2.26-37.amzn2.x86_64  
    glibc-langpack-hi-2.26-37.amzn2.x86_64  
    glibc-langpack-hne-2.26-37.amzn2.x86_64  
    glibc-langpack-hr-2.26-37.amzn2.x86_64  
    nscd-2.26-37.amzn2.x86_64  
    glibc-langpack-hsb-2.26-37.amzn2.x86_64  
    glibc-langpack-ht-2.26-37.amzn2.x86_64  
    glibc-langpack-hu-2.26-37.amzn2.x86_64  
    glibc-langpack-hy-2.26-37.amzn2.x86_64  
    glibc-langpack-ia-2.26-37.amzn2.x86_64  
    glibc-langpack-id-2.26-37.amzn2.x86_64  
    glibc-langpack-ig-2.26-37.amzn2.x86_64  
    glibc-langpack-ik-2.26-37.amzn2.x86_64  
    glibc-langpack-is-2.26-37.amzn2.x86_64  
    glibc-langpack-it-2.26-37.amzn2.x86_64  
    glibc-langpack-iu-2.26-37.amzn2.x86_64  
    glibc-langpack-ja-2.26-37.amzn2.x86_64  
    glibc-langpack-ka-2.26-37.amzn2.x86_64  
    glibc-langpack-kk-2.26-37.amzn2.x86_64  
    glibc-langpack-kl-2.26-37.amzn2.x86_64  
    glibc-langpack-km-2.26-37.amzn2.x86_64  
    glibc-langpack-kn-2.26-37.amzn2.x86_64  
    glibc-langpack-ko-2.26-37.amzn2.x86_64  
    glibc-langpack-kok-2.26-37.amzn2.x86_64  
    glibc-langpack-ks-2.26-37.amzn2.x86_64  
    glibc-langpack-ku-2.26-37.amzn2.x86_64  
    glibc-langpack-kw-2.26-37.amzn2.x86_64  
    glibc-langpack-ky-2.26-37.amzn2.x86_64  
    glibc-langpack-lb-2.26-37.amzn2.x86_64  
    glibc-langpack-lg-2.26-37.amzn2.x86_64  
    glibc-langpack-li-2.26-37.amzn2.x86_64  
    glibc-langpack-lij-2.26-37.amzn2.x86_64  
    glibc-langpack-ln-2.26-37.amzn2.x86_64  
    glibc-langpack-lo-2.26-37.amzn2.x86_64  
    glibc-langpack-lt-2.26-37.amzn2.x86_64  
    glibc-langpack-lv-2.26-37.amzn2.x86_64  
    glibc-langpack-lzh-2.26-37.amzn2.x86_64  
    glibc-langpack-mag-2.26-37.amzn2.x86_64  
    glibc-langpack-mai-2.26-37.amzn2.x86_64  
    glibc-langpack-mg-2.26-37.amzn2.x86_64  
    glibc-langpack-mhr-2.26-37.amzn2.x86_64  
    glibc-langpack-mi-2.26-37.amzn2.x86_64  
    glibc-langpack-mk-2.26-37.amzn2.x86_64  
    glibc-langpack-ml-2.26-37.amzn2.x86_64  
    glibc-langpack-mn-2.26-37.amzn2.x86_64  
    glibc-langpack-mni-2.26-37.amzn2.x86_64  
    glibc-langpack-mr-2.26-37.amzn2.x86_64  
    glibc-langpack-ms-2.26-37.amzn2.x86_64  
    glibc-langpack-mt-2.26-37.amzn2.x86_64  
    glibc-langpack-my-2.26-37.amzn2.x86_64  
    glibc-langpack-nan-2.26-37.amzn2.x86_64  
    glibc-langpack-nb-2.26-37.amzn2.x86_64  
    glibc-langpack-nds-2.26-37.amzn2.x86_64  
    glibc-langpack-ne-2.26-37.amzn2.x86_64  
    glibc-langpack-nhn-2.26-37.amzn2.x86_64  
    glibc-langpack-niu-2.26-37.amzn2.x86_64  
    glibc-langpack-nl-2.26-37.amzn2.x86_64  
    glibc-langpack-nn-2.26-37.amzn2.x86_64  
    glibc-langpack-nr-2.26-37.amzn2.x86_64  
    glibc-langpack-nso-2.26-37.amzn2.x86_64  
    glibc-langpack-oc-2.26-37.amzn2.x86_64  
    glibc-langpack-om-2.26-37.amzn2.x86_64  
    glibc-langpack-or-2.26-37.amzn2.x86_64  
    glibc-langpack-os-2.26-37.amzn2.x86_64  
    glibc-langpack-pa-2.26-37.amzn2.x86_64  
    glibc-langpack-pap-2.26-37.amzn2.x86_64  
    glibc-langpack-pl-2.26-37.amzn2.x86_64  
    glibc-langpack-ps-2.26-37.amzn2.x86_64  
    glibc-langpack-pt-2.26-37.amzn2.x86_64  
    glibc-langpack-quz-2.26-37.amzn2.x86_64  
    glibc-langpack-raj-2.26-37.amzn2.x86_64  
    glibc-langpack-ro-2.26-37.amzn2.x86_64  
    glibc-langpack-ru-2.26-37.amzn2.x86_64  
    glibc-langpack-rw-2.26-37.amzn2.x86_64  
    glibc-langpack-sa-2.26-37.amzn2.x86_64  
    glibc-langpack-sat-2.26-37.amzn2.x86_64  
    glibc-langpack-sc-2.26-37.amzn2.x86_64  
    glibc-langpack-sd-2.26-37.amzn2.x86_64  
    glibc-langpack-se-2.26-37.amzn2.x86_64  
    glibc-langpack-sgs-2.26-37.amzn2.x86_64  
    glibc-langpack-shs-2.26-37.amzn2.x86_64  
    glibc-langpack-si-2.26-37.amzn2.x86_64  
    glibc-langpack-sid-2.26-37.amzn2.x86_64  
    glibc-langpack-sk-2.26-37.amzn2.x86_64  
    glibc-langpack-sl-2.26-37.amzn2.x86_64  
    glibc-langpack-so-2.26-37.amzn2.x86_64  
    glibc-langpack-sq-2.26-37.amzn2.x86_64  
    glibc-langpack-sr-2.26-37.amzn2.x86_64  
    glibc-langpack-ss-2.26-37.amzn2.x86_64  
    glibc-langpack-st-2.26-37.amzn2.x86_64  
    glibc-langpack-sv-2.26-37.amzn2.x86_64  
    glibc-langpack-sw-2.26-37.amzn2.x86_64  
    glibc-langpack-szl-2.26-37.amzn2.x86_64  
    glibc-langpack-ta-2.26-37.amzn2.x86_64  
    glibc-langpack-tcy-2.26-37.amzn2.x86_64  
    glibc-langpack-te-2.26-37.amzn2.x86_64  
    glibc-langpack-tg-2.26-37.amzn2.x86_64  
    glibc-langpack-th-2.26-37.amzn2.x86_64  
    glibc-langpack-the-2.26-37.amzn2.x86_64  
    glibc-langpack-ti-2.26-37.amzn2.x86_64  
    glibc-langpack-tig-2.26-37.amzn2.x86_64  
    glibc-langpack-tk-2.26-37.amzn2.x86_64  
    glibc-langpack-tl-2.26-37.amzn2.x86_64  
    glibc-langpack-tn-2.26-37.amzn2.x86_64  
    glibc-langpack-tr-2.26-37.amzn2.x86_64  
    glibc-langpack-ts-2.26-37.amzn2.x86_64  
    glibc-langpack-tt-2.26-37.amzn2.x86_64  
    glibc-langpack-ug-2.26-37.amzn2.x86_64  
    glibc-langpack-uk-2.26-37.amzn2.x86_64  
    glibc-langpack-unm-2.26-37.amzn2.x86_64  
    glibc-langpack-ur-2.26-37.amzn2.x86_64  
    glibc-langpack-uz-2.26-37.amzn2.x86_64  
    glibc-langpack-ve-2.26-37.amzn2.x86_64  
    glibc-langpack-vi-2.26-37.amzn2.x86_64  
    glibc-langpack-wa-2.26-37.amzn2.x86_64  
    glibc-langpack-wae-2.26-37.amzn2.x86_64  
    glibc-langpack-wal-2.26-37.amzn2.x86_64  
    glibc-langpack-wo-2.26-37.amzn2.x86_64  
    glibc-langpack-xh-2.26-37.amzn2.x86_64  
    glibc-langpack-yi-2.26-37.amzn2.x86_64  
    glibc-langpack-yo-2.26-37.amzn2.x86_64  
    glibc-langpack-yue-2.26-37.amzn2.x86_64  
    glibc-langpack-zh-2.26-37.amzn2.x86_64  
    glibc-langpack-zu-2.26-37.amzn2.x86_64  
    glibc-all-langpacks-2.26-37.amzn2.x86_64  
    glibc-minimal-langpack-2.26-37.amzn2.x86_64  
    nss_db-2.26-37.amzn2.x86_64  
    nss_nis-2.26-37.amzn2.x86_64  
    nss_hesiod-2.26-37.amzn2.x86_64  
    glibc-nss-devel-2.26-37.amzn2.x86_64  
    glibc-utils-2.26-37.amzn2.x86_64  
    glibc-debuginfo-2.26-37.amzn2.x86_64  
    glibc-debuginfo-common-2.26-37.amzn2.x86_64  
    glibc-benchtests-2.26-37.amzn2.x86_64  

Additional References

Red Hat: CVE-2019-19126, CVE-2020-10029, CVE-2020-1752

Mitre: CVE-2019-19126, CVE-2020-10029, CVE-2020-1752

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

CVSS3

7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

44.9%