CVE-2020-1752 — Use After Free in Glibc

CWE-416 — Use After FreeCWE-93 — CRLF Injection13 documents10 sources
Severity
7.0HIGHNVD
GHSA6.1
EPSS
0.2%
top 59.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
GNU GlibcGNU Libc GlibcCanonical Ubuntu Linux+2 more
Timeline
PublishedApr 30
Latest updateMar 21

Description

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages4 packages

▶NVDgnu/glibc< 2.32.0
▶Debiangnu/glibc< 2.30-3+3
▶CVEListV5gnu_libc/glibcAffected: versions 2.14 and later, Fixed: version 2.32+1

Also affects: Debian Linux 10.0, Ubuntu Linux 16.04, 18.04, 19.10

Patches

Patch: bugzilla.redhat.com ↗Patch: sourceware.org ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

4
GHSA
dio vulnerable to CRLF injection with HTTP method string↗2023-03-21
▶
GHSA
GHSA-8x3m-4qgh-829r: A use-after-free vulnerability introduced in glibc upstream version 2↗2022-05-24
▶
OSV
CVE-2020-1752: A use-after-free vulnerability introduced in glibc upstream version 2↗2020-04-30
▶
CVEList
CVE-2020-1752: A use-after-free vulnerability introduced in glibc upstream version 2↗2020-04-30
▶

📋Vendor Advisories

4
Ubuntu
GNU C Library vulnerabilities↗2020-07-06
▶
Microsoft
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid usern↗2020-04-14
▶
Red Hat
glibc: use-after-free in glob() function when expanding ~user↗2020-01-17
▶
Debian
CVE-2020-1752: glibc - A use-after-free vulnerability introduced in glibc upstream version 2.14 was fou...↗2020
▶

💬Community

4
Bugzilla
CVE-2020-27752 ImageMagick: heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h↗2020-11-03
▶
Bugzilla
CVE-2020-2115 jenkins-nUnit-plugin: XML parser not configured to prevent XEE↗2020-03-31
▶
Bugzilla
CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user [fedora-all]↗2020-03-09
▶
Bugzilla
CVE-2020-1752 glibc: use-after-free in glob() function when expanding ~user↗2020-03-05
▶
CVE-2020-1752 — Use After Free in GNU Glibc | cvebase