Description
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.
CVSS breakdown
CVSS 3.0
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected products
- gnu / glibc
- GNU Libc / glibccurrent (At least as of 2018-02-16) – current (At least as of 2018-02-16)
References
- MISChttps://sourceware.org/bugzilla/show_bug.cgi?id=22853
- MISChttps://support.f5.com/csp/article/K06046097
- MISChttps://support.f5.com/csp/article/K06046097?utm_source=f5support&%3Butm_medium=RSS
- VENDOR_ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2019-1010025
- VENDOR_ADVISORYhttps://ubuntu.com/security/CVE-2019-1010025
Updated 15m ago · 8 sources