CVE-2019-1010023
Medium
Description
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
SeverityMedium
CVSS5.4
Exploit probability—
Product
Gnu Glibc
PublishedJul 15, 2019
First seenJul 15, 2019
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu glibc | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.