Not rated
CVE-2019-1010025 GNU Libc current is affected by: Mitigation bypass
Description
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glibc | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- sourceware.org sourceware.org
- support.f5.com support.f5.com
- support.f5.com support.f5.com
- CVE-2019-1010025 security-tracker.debian.org
- CVE-2019-1010025 ubuntu.com
Timeline
- Published
- Last modified
Other CVEs of glibc
The 4 CVEs of glibc →
CVE-2020-1752
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was…
7.0
High
CVE-2019-1010023
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file
5.4
Medium
CVE-2019-1010024
GNU Libc current is affected by: Mitigation bypass
Not rated