IM
IronMonkey Threat Research

CVE-2020-1751 HIGH

Published: 2020-04-17 | Last Modified: 2024-11-21 | Status: Modified

Description

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

Additional Descriptions (1)

Se encontró una vulnerabilidad de escritura fuera de límites en glibc versiones anteriores a 2.31, cuando se manejaban trampolines de señal en PowerPC. Concretamente, la función backtrace no comprueba apropiadamente los límites de la matriz cuando almacena la dirección de la trama, resultando en una denegación de servicio o a una posible ejecución de código. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema.

CVSS Metrics

Base Score: 7.0 (HIGH)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.0

Impact Score: 5.9

Base Score: 5.9 (MEDIUM)

AV:L/AC:M/Au:N/C:P/I:P/A:C

Access VectorLOCAL
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactCOMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 3.4

Impact Score: 8.5

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-787
[email protected] Primary
en CWE-787

Affected Products

Vendor Product Version Update Type
gnu glibc * <built-in method update of dict object at 0x7fd384e13300> Application
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd39c52ce00> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd36960dd00> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd369ef5100> Operating System
canonical ubuntu_linux 19.10 <built-in method update of dict object at 0x7fd384e10240> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

References