CVE-2019-1010022Improper Restriction of Operations within the Bounds of a Memory Buffer in C Library Glibc

Severity
9.8CRITICALNVD
EPSS
0.1%
top 67.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 15
Latest updateDec 14

Description

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

debiandebian/glibc
CVEListV5gnu_c_library/glibccurrent (At least as of 2018-02-16)

🔴Vulnerability Details

2
GHSA
GHSA-hqfh-jh33-mj7r: GNU Libc current is affected by: Mitigation bypass2022-05-24
OSV
CVE-2019-1010022: GNU Libc current is affected by: Mitigation bypass2019-07-15

📋Vendor Advisories

3
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.12023-12-14
Red Hat
glibc: stack guard protection bypass2019-03-20
Debian
CVE-2019-1010022: glibc - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may ...2019

💬Community

3
Bugzilla
CVE-2019-1010022 glibc: stack guard protection bypass2019-07-22
Bugzilla
CVE-2019-1010022 glibc: stack guard protection bypass [fedora-all]2019-07-22
Bugzilla
CVE-2019-1010022 glibc: Stack canary bypass via pthread_create() [fedora-all]2018-02-19