Arbitrary Code Execution

2020-04-1001:11:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.094 Low

EPSS

Percentile

94.7%

JSON

glibc is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library loaded ELF (Executable and Linking Format) files. If a carefully-crafted ELF file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
glibceq2.5__58.el5_6.2
glibceq2.5__42.el5_4.3
glibceq2.5__49.el5_5.7
glibceq2.5__18.el5_1.1
glibceq2.5__58.el5_6.3
glibceq2.5__24.el5_2.2
glibceq2.5__49.el5_5.6
glibceq2.5__49.el5_5.4
glibceq2.5__49.el5_5.5
glibceq2.5__42.el5_4.2

Name	Operator	Version
glibc	eq	2.5__58.el5_6.2
glibc	eq	2.5__42.el5_4.3
glibc	eq	2.5__49.el5_5.7
glibc	eq	2.5__18.el5_1.1
glibc	eq	2.5__58.el5_6.3
glibc	eq	2.5__24.el5_2.2
glibc	eq	2.5__49.el5_5.6
glibc	eq	2.5__49.el5_5.4
glibc	eq	2.5__49.el5_5.5
glibc	eq	2.5__42.el5_4.2