7.0
Élevée
CVE-2020-1752 A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was…
Description
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glibc | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- security.netapp.com security.netapp.com
- USN-4416-1 usn.ubuntu.com
- GLSA-202101-20 security.gentoo.org
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 lists.apache.org
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 lists.apache.org
- [debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update lists.debian.org
Chronologie
- Publiée
- Dernière modification