CVE-2019-1010024: Infoleak
DISPUTED GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat."
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this GNU Libc vulnerability?
The vulnerability ID for this GNU Libc vulnerability is CVE-2019-1010024.
What is the impact of this vulnerability?
The impact of this vulnerability is that an attacker may bypass ASLR using cache of thread stack and heap.
Which software components are affected by this vulnerability?
The affected software component is glibc.
Is there a fix available for this vulnerability?
No fix is available as this vulnerability is being treated as a non-security bug with no real threat.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: SecurityFocus BID 109162, Debian Security Tracker CVE-2019-1010024, and Sourceware Bugzilla Bug 22852.