Name: CVE-2019-1010023: Undefined Security Weakness
Creator: Rapid7
Published: 2019-07-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-1010023, CVSS 5.4, EPSS 0.03069

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

CVSS Details

CVSS 3.1 Base Score: 5.4
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
CVSS 3.0 Base Score: 8.8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	No solution exists	May 15, 2025	Jul 15, 2019
Huawei Euleros 2_0_sp2	—	Upgrade nscdUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibc	Jun 17, 2020	Jul 15, 2019
Huawei Euleros 2_0_sp3	—	Upgrade glibc-utilsUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-develUpgrade glibc-common	Apr 30, 2021	Jul 15, 2019
Huawei Euleros 2_0_sp5	—	Upgrade glibc-develUpgrade glibcUpgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-common	Feb 24, 2020	Jul 15, 2019
Huawei Euleros 2_0_sp8	—	Upgrade glibc-langpack-slUpgrade glibc-langpack-dvUpgrade glibc-langpack-tlUpgrade glibc-langpack-mfeUpgrade glibc-langpack-hsbUpgrade glibc-langpack-woUpgrade glibc-commonUpgrade glibc-langpack-bgUpgrade glibc-langpack-nhnUpgrade glibc-langpack-miqUpgrade glibc-langpack-msUpgrade glibc-langpack-ceUpgrade glibc-langpack-bhbUpgrade glibc-langpack-bemUpgrade glibc-langpack-yuwUpgrade glibc-langpack-walUpgrade glibc-langpack-tiUpgrade glibc-langpack-sgsUpgrade glibc-langpack-rajUpgrade glibc-langpack-mtUpgrade glibc-langpack-mjwUpgrade glibc-langpack-mhrUpgrade glibc-langpack-liUpgrade glibc-langpack-chrUpgrade glibc-langpack-ikUpgrade glibc-langpack-kwUpgrade glibc-langpack-sqUpgrade glibc-langpack-quzUpgrade glibc-langpack-huUpgrade glibc-langpack-plUpgrade glibc-langpack-lbUpgrade glibc-langpack-koUpgrade glibc-langpack-gdUpgrade glibc-langpack-etUpgrade glibc-langpack-arUpgrade glibc-langpack-boUpgrade glibc-langpack-astUpgrade glibc-langpack-htUpgrade glibc-langpack-haUpgrade glibc-langpack-fyUpgrade glibc-langpack-crhUpgrade glibc-langpack-asUpgrade glibc-langpack-filUpgrade nss_dbUpgrade glibc-langpack-waeUpgrade glibc-langpack-uzUpgrade glibc-langpack-ugUpgrade glibc-langpack-srUpgrade glibc-langpack-soUpgrade glibc-langpack-satUpgrade glibc-langpack-ruUpgrade glibc-langpack-ocUpgrade glibc-langpack-ksUpgrade glibc-langpack-svUpgrade glibc-langpack-hiUpgrade glibc-langpack-biUpgrade glibc-langpack-glUpgrade glibc-staticUpgrade glibc-langpack-tgUpgrade glibc-langpack-papUpgrade glibc-langpack-ltUpgrade glibc-langpack-nsoUpgrade nscdUpgrade glibc-langpack-dsbUpgrade glibc-langpack-kabUpgrade glibc-langpack-sahUpgrade glibc-langpack-viUpgrade glibc-langpack-ukUpgrade glibc-langpack-neUpgrade glibc-langpack-mniUpgrade glibc-langpack-caUpgrade glibc-langpack-mkUpgrade glibc-langpack-lijUpgrade glibc-langpack-hifUpgrade glibc-langpack-foUpgrade glibc-langpack-bsUpgrade glibc-langpack-anUpgrade glibc-langpack-knUpgrade glibc-langpack-beUpgrade glibc-langpack-tsUpgrade glibc-langpack-paUpgrade glibc-langpack-daUpgrade glibc-langpack-bnUpgrade glibc-langpack-azUpgrade glibc-langpack-yueUpgrade glibc-langpack-ptUpgrade glibc-langpack-aaUpgrade glibc-locale-sourceUpgrade glibc-langpack-taUpgrade glibc-langpack-fiUpgrade libnslUpgrade glibc-langpack-ssUpgrade glibc-langpack-smUpgrade glibc-langpack-lzhUpgrade glibc-langpack-furUpgrade glibc-langpack-bynUpgrade glibc-langpack-thUpgrade glibc-langpack-eoUpgrade glibc-langpack-iuUpgrade glibc-langpack-gvUpgrade glibc-langpack-faUpgrade glibc-langpack-doiUpgrade glibc-langpack-bhoUpgrade glibc-langpack-yiUpgrade glibc-langpack-unmUpgrade glibc-langpack-roUpgrade glibc-langpack-omUpgrade glibc-langpack-nbUpgrade glibc-langpack-myUpgrade glibc-langpack-magUpgrade glibc-langpack-km	Feb 26, 2020	Jul 15, 2019
Redhat_linux	—	No solution exists	Jul 9, 2025	Jul 15, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence