VDB
ALINUX2-SA-2020%3A0164
ALINUX2-SA-2020%3A0164
PUBLISHED
CVSS 2.9000000953674316 LOW
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-19126: On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
Risk Scores
CVSS 3.0
2.9000000953674316
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | glibc |
Timeline
- Oct 13, 2020 CVE Published
- Oct 13, 2020 CVE Updated