glibc: ld.so d_tag signedness error in elf_get_dynamic_info

🗓️ 13 Feb 2012 20:30:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 7 Views

glibc ld.so d_tag signedness flaw enables code execution via crafted ELF when --verify is used.

Reporter	Title	Published	Views	Family All 154
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	i386	glibc	2.3.4-2.57	glibc-2.3.4-2.57.i386.rpm
Red Hat Enterprise Linux	any	i686	glibc	2.3.4-2.57	glibc-2.3.4-2.57.i686.rpm
Red Hat Enterprise Linux	any	ia64	glibc	2.3.4-2.57	glibc-2.3.4-2.57.ia64.rpm
Red Hat Enterprise Linux	any	ppc	glibc	2.3.4-2.57	glibc-2.3.4-2.57.ppc.rpm
Red Hat Enterprise Linux	any	ppc64	glibc	2.3.4-2.57	glibc-2.3.4-2.57.ppc64.rpm
Red Hat Enterprise Linux	any	s390	glibc	2.3.4-2.57	glibc-2.3.4-2.57.s390.rpm
Red Hat Enterprise Linux	any	s390x	glibc	2.3.4-2.57	glibc-2.3.4-2.57.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	glibc	2.3.4-2.57	glibc-2.3.4-2.57.x86_64.rpm
Red Hat Enterprise Linux	any	i386	glibc-common	2.3.4-2.57	glibc-common-2.3.4-2.57.i386.rpm
Red Hat Enterprise Linux	any	ia64	glibc-common	2.3.4-2.57	glibc-common-2.3.4-2.57.ia64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-0830
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-0830
cve	www.cve.org/CVERecord

27 Jun 2026 16:39Current

7.8High risk

Vulners AI Score7.8

CVSS 25.1

EPSS0.04514

gnu c library dynamic tag elf loader signedness error verify option crafted elf