CVE-2019-1010025

ADVISORY - debian

Summary

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.

glibc (unimportant) Not treated as a security issue by upstream https://sourceware.org/bugzilla/show_bug.cgi?id=22853

EPSS Score⁠: 0.02267 (0.821)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-330⁠

Use of Insufficiently Random Values

ADVISORY - redhat

CWE-200⁠

Exposure of Sensitive Information to an Unauthorized Actor

Impacted images

Advisories

Debian

CREATED

7 years ago

UPDATED

14 days ago

ADVISORY IDCVE-2019-1010025⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
debian/glibc	deb	debian	12	>0	Not yet available
debian/glibc	deb	debian	13	>0	Not yet available
debian/glibc	deb	debian	14	>0	Not yet available
debian/glibc	deb	debian	unstable	>0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

7 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2019-1010025⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-330⁠

CVSS SCORE

5.3medium

Ubuntu

CREATED

7 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2019-1010025⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.3low

Red Hat

CREATED

7 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2019-1010025⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-200⁠

CVSS SCORE

2.9low

Chainguard

CREATED

20 days ago

UPDATED

20 days ago

ADVISORY ID

CGA-5gg9-hw59-3ffq

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY ID

CGA-95xj-hfwv-q3mc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

intheWild

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDCVE-2019-1010025⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

MINI-29px-78xq-fj24

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY ID

MINI-4hjr-3rw9-p262

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

MINI-x4vg-3rw6-7hv5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY