GNU Libc glibc

4 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2020-1752Affected: versions 2.14 and later ; Fixed: version 2.32A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. DirectoryHIGH 7.00.5 %
CVE-2019-1010025current (At least as of 2018-02-16)GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The compMEDIUM 5.32.5 %
CVE-2019-1010023current (At least as of 2018-02-16)GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluaMEDIUM 5.43.1 %
CVE-2019-1010024current (At least as of 2018-02-16)GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The componMEDIUM 5.33.2 %