Not rated
CVE-2019-1010024 GNU Libc current is affected by: Mitigation bypass
Description
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glibc | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of glibc
The 4 CVEs of glibc →
CVE-2020-1752
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was…
7.0
High
CVE-2019-1010025
GNU Libc current is affected by: Mitigation bypass
Not rated
CVE-2019-1010023
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file
5.4
Medium