K06046097 : glibc vulnerabilities CVE-2019-1010024 and CVE-2019-1010025

Security Advisory Description

• CVE-2019-1010024

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc.

• CVE-2019-1010025

DISPUTED GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor’s position is “ASLR bypass itself is not a vulnerability.”

Impact

There is no impact; F5 products are not affected by this vulnerability.