Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0830
HistoryApr 07, 2010 - 12:00 a.m.

CVE-2010-0830

2010-04-0700:00:00
ubuntu.com
ubuntu.com
12

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.094 Low

EPSS

Percentile

94.6%

Integer signedness error in the elf_get_dynamic_info function in
elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1
through 2.11.1, when the --verify option is used, allows user-assisted
remote attackers to execute arbitrary code via a crafted ELF program with a
negative value for a certain d_tag structure member in the ELF header.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarcheglibc< 2.10.1-0ubuntu17UNKNOWN
ubuntu10.04noarcheglibc< 2.11.1-0ubuntu7.1UNKNOWN
ubuntu6.06noarchglibc< 2.3.6-0ubuntu20.6UNKNOWN
ubuntu8.04noarchglibc< 2.7-10ubuntu6UNKNOWN
ubuntu9.04noarchglibc< 2.9-4ubuntu6.2UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.094 Low

EPSS

Percentile

94.6%