CVE-2019-1010024: Infoleak
First published: Mon Jul 15 2019(Updated: )
** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat."
Credit: josh@bress.net josh@bress.net josh@bress.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU glibc | ||
| debian/glibc | <=2.31-13+deb11u11<=2.31-13+deb11u10<=2.36-9+deb12u9<=2.36-9+deb12u7<=2.40-3<=2.40-4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/109162
- https://security-tracker.debian.org/tracker/CVE-2019-1010024
- https://sourceware.org/bugzilla/show_bug.cgi?id=22852
- https://support.f5.com/csp/article/K06046097
- https://support.f5.com/csp/article/K06046097?utm_source=f5support&utm_medium=RSS
- https://ubuntu.com/security/CVE-2019-1010024
- https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp;utm_medium=RSS
- https://launchpad.net/bugs/cve/CVE-2019-1010024
- https://support.f5.com/csp/article/K06046097?utm_source=f5support&%3Butm_medium=RSS
- https://www.cve.org/CVERecord?id=CVE-2019-1010024
- https://nvd.nist.gov/vuln/detail/CVE-2019-1010024
Frequently Asked Questions
What is the vulnerability ID for this GNU Libc vulnerability?
The vulnerability ID for this GNU Libc vulnerability is CVE-2019-1010024.
What is the impact of this vulnerability?
The impact of this vulnerability is that an attacker may bypass ASLR using cache of thread stack and heap.
Which software components are affected by this vulnerability?
The affected software component is glibc.
Is there a fix available for this vulnerability?
No fix is available as this vulnerability is being treated as a non-security bug with no real threat.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: SecurityFocus BID 109162, Debian Security Tracker CVE-2019-1010024, and Sourceware Bugzilla Bug 22852.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/weakness
- agent/status
- agent/description
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/nvd-cve
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- status/disputed
- vendor/gnu
- canonical/gnu glibc
- package-manager/debian