Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-19126 →
DEBIAN-CVE-2019-19126
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
glibc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29-8"}]}]
Debian:13
glibc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29-8"}]}]
Debian:14
glibc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29-8"}]}]
Références
- advisory security-tracker.debian.org