CVEvulnerability

CVE-2019-19126

3.3 LOW Published 2019-11-19 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2019-11-19
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-665

Description

On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.

Affected configurations

• gnu glibc (< 2.31) • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • fedoraproject fedora 30 • fedoraproject fedora 31 • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-665 Improper Initialization weakness

References