Arbitrary Code Execution

2020-04-1001:11:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

JSON

glibc is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
glibceq2.5__58.el5_6.2
glibceq2.5__42.el5_4.3
glibceq2.5__49.el5_5.7
glibceq2.5__18.el5_1.1
glibceq2.5__58.el5_6.3
glibceq2.5__24.el5_2.2
glibceq2.5__49.el5_5.6
glibceq2.5__49.el5_5.4
glibceq2.5__49.el5_5.5
glibceq2.5__42.el5_4.2

Name	Operator	Version
glibc	eq	2.5__58.el5_6.2
glibc	eq	2.5__42.el5_4.3
glibc	eq	2.5__49.el5_5.7
glibc	eq	2.5__18.el5_1.1
glibc	eq	2.5__58.el5_6.3
glibc	eq	2.5__24.el5_2.2
glibc	eq	2.5__49.el5_5.6
glibc	eq	2.5__49.el5_5.4
glibc	eq	2.5__49.el5_5.5
glibc	eq	2.5__42.el5_4.2