CVE-2019-1010023

2019-07-1503:09:37

dwf

github.com

AI Score

6.8

Confidence

Low

EPSS

0.012

Percentile

85.3%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

CNA Affected

[
  {
    "vendor": "GNU Libc",
    "product": "glibc",
    "versions": [
      {
        "status": "affected",
        "version": "current (At least as of 2018-02-16)"
      }
    ]
  }
]