PT-2019-6228

🗓️ 19 Nov 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 5 Views

Local attackers can restrict library mapping via LD_PREFER_MAP_32BIT_EXEC to bypass ASLR.

Reporter	Title	Published	Views	Family All 232
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	1 Mar 202417:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in GNU glibc (CVE-2018-11236)	17 Apr 201915:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in glibc (CVE-2018-11236)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST	20 May 202423:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	2 Feb 202122:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in glibc affect PowerKVM	4 Mar 201905:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	25 Sep 202517:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm

Source	Link
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6
suse	www.suse.com/security/cve/CVE-2017-1000408
suse	www.suse.com/security/cve/CVE-2016-10739
bugs	www.bugs.mageia.org/show_bug.cgi
ubuntu	www.ubuntu.com/security/CVE-2018-6485
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/682249
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2021-03122
osv	www.osv.dev/vulnerability/USN-4416-1

15 Jun 2024 00:00Current

CVSS 3.13.3

CVSS 27.5

CVSS 39.8

EPSS0.07051

GNU C Library LD_PREFER_MAP_32BIT_EXEC ASLR bypass local attack confidential data access