CVE-2019-1010023

🗓️ 15 Jul 2019 03:09:37Reported by dwfType

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat

Reporter	Title	Published	Views	Family All 33
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
CNVD	GNU C Library libld Remote Code Execution Vulnerability	17 Jul 201900:00	–	cnvd
Cvelist	CVE-2019-1010023	15 Jul 201903:09	–	cvelist
Debian CVE	CVE-2019-1010023	15 Jul 201903:09	–	debiancve
Tenable Nessus	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2020-1102)	24 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2020-1152)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : glibc (EulerOS-SA-2020-1667)	17 Jun 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2021-1790)	30 Apr 202100:00	–	nessus
Tenable Nessus	Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2019-1010023)	13 Nov 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2019-1010023	15 Aug 202500:00	–	nessus

NVD

Node

gnu glibcMatch-

[
  {
    "product": "glibc",
    "vendor": "GNU Libc",
    "versions": [
      {
        "status": "affected",
        "version": "current (At least as of 2018-02-16)"
      }
    ]
  }
]

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-1010023
securityfocus	www.securityfocus.com/bid/109167
ubuntu	www.ubuntu.com/security/CVE-2019-1010023
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
support	www.support.f5.com/csp/article/K11932200

21 Nov 2024 04:17Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 38.8

CVSS 3.15.4

EPSS0.00293

SSVC