Skip to content
fr Sign in
5.4 Medium

CVE-2019-1010023 GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file

Description

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

Affected products and versions

Product Affected versions Fixed in
glibc Versions not published
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of glibc

The 4 CVEs of glibc →
CVE-2020-1752 A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was… 7.0 High CVE-2019-1010025 GNU Libc current is affected by: Mitigation bypass Not rated CVE-2019-1010024 GNU Libc current is affected by: Mitigation bypass Not rated
Track this CVE