Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-1752
HistoryApr 30, 2020 - 5:15 p.m.

CVE-2020-1752

2020-04-3017:15:13
CWE-416
[email protected]
web.nvd.nist.gov
2

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.

Affected configurations

NVD
Node
gnuglibcRange<2.32.0
Node
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.10
Node
netappactive_iq_unified_managerRange9.5≥vmware_vsphere
OR
netapphci_management_nodeMatch-
OR
netappsolidfireMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
Node
netapph410c_firmwareMatch-
AND
netapph410cMatch-
Node
debiandebian_linuxMatch10.0

Related

ubuntucve 1
cvelist 1
suse 1
nessus 22
photon 5
f5 1
ibm 11
prion 1
openvas 15
cve 1
veracode 1
redhatcve 1
cbl_mariner 1
debiancve 1
mageia 1
altlinux 1
fedora 4
amazon 2
oraclelinux 1
redhat 11
gentoo 1
ubuntu 1
cloudfoundry 1
debian 1
osv 1
rosalinux 1
ics 2
avleonov 1
ubuntucve
ubuntucve
CVE-2020-1752
2020-04-30 00:00:00
cvelist
cvelist
CVE-2020-1752
2020-04-30 00:00:00
suse
suse
Security update for glibc (important)
2020-04-07 00:00:00
nessus
nessus
Photon OS 1.0: Glibc PHSA-2020-1.0-0298
2020-06-10 00:00:00
openSUSE Security Update : glibc (openSUSE-2020-467)
2020-04-07 00:00:00
F5 Networks BIG-IP : glibc vulnerability (K49921213)
2023-11-02 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0097
2020-05-28 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0097
2020-05-28 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0248
2020-06-02 00:00:00
f5
f5
K49921213 : glibc vulnerability CVE-2020-1752
2020-07-02 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in GNU glibc (CVE-2020-1752)
2023-01-12 21:59:00
Security Bulletin: A GNU glibc vulnerability affects IBM Watson Text to Speech and Speech to Text (IBM Watson Speech Services for Cloud Pak for Data 1.2)
2020-12-16 17:49:13
Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2020-1752)
2020-12-11 16:09:41
prion
prion
Design/Logic Flaw
2020-04-30 17:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0820-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1123-1)
2022-04-07 00:00:00
openSUSE: Security Advisory for glibc (openSUSE-SU-2020:0467-1)
2020-04-07 00:00:00
cve
cve
CVE-2020-1752
2020-04-30 17:15:13
veracode
veracode
Arbitrary Code Execution
2020-11-05 03:15:00
redhatcve
redhatcve
CVE-2020-1752
2020-03-06 17:10:57
cbl_mariner
cbl_mariner
CVE-2020-1752 affecting package glibc 2.28-24
2020-10-08 18:09:54
debiancve
debiancve
CVE-2020-1752
2020-04-30 17:15:13
mageia
mageia
Updated glibc packages fix security vulnerabilities
2020-03-09 01:37:31
altlinux
altlinux
Security fix for the ALT Linux 9 package glibc version 6:2.27-alt13
2020-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: glibc-2.31-2.fc32
2020-03-31 00:19:49
[SECURITY] Fedora 31 Update: glibc-2.30-11.fc31
2020-04-05 03:04:03
[SECURITY] Fedora 30 Update: glibc-2.29-29.fc30
2020-04-09 17:44:21
amazon
amazon
Medium: glibc
2023-02-17 00:11:00
Medium: glibc
2023-08-21 10:35:00
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2020-11-10 00:00:00
redhat
redhat
(RHSA-2020:4444) Moderate: glibc security, bug fix, and enhancement update
2020-11-03 12:05:18
(RHSA-2021:0146) Moderate: Release of OpenShift Serverless 1.12.0
2021-01-14 13:24:22
(RHSA-2020:5149) Moderate: Release of OpenShift Serverless 1.11.0
2020-11-18 13:59:56
gentoo
gentoo
glibc: Multiple vulnerabilities
2021-01-25 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2020-07-06 00:00:00
cloudfoundry
cloudfoundry
USN-4416-1: GNU C Library vulnerabilities | Cloud Foundry
2020-08-27 00:00:00
debian
debian
[SECURITY] [DLA 3152-1] glibc security update
2022-10-17 15:54:41
osv
osv
glibc - security update
2022-10-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1844
2021-07-02 16:56:21
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON
Related for NVD:CVE-2020-1752
ubuntucve1cvelist1suse1nessus22photon5f51ibm11prion1openvas15cve1veracode1redhatcve1cbl_mariner1debiancve1mageia1altlinux1fedora4amazon2oraclelinux1redhat11gentoo1ubuntu1cloudfoundry1debian1osv1rosalinux1ics2avleonov1