GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-commonUpgrade nscdUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-develUpgrade glibc | Jun 17, 2020 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-commonUpgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-utils | Apr 30, 2021 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-develUpgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-utils | Feb 24, 2020 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade glibc-langpack-waUpgrade glibc-langpack-afUpgrade glibc-langpack-gezUpgrade glibc-langpack-tigUpgrade glibc-langpack-zhUpgrade glibc-langpack-igUpgrade glibc-langpack-dzUpgrade glibc-langpack-saUpgrade glibc-langpack-ttUpgrade glibc-langpack-niuUpgrade glibc-langpack-stUpgrade glibc-langpack-isUpgrade glibc-langpack-sidUpgrade glibc-langpack-osUpgrade glibc-langpack-skUpgrade glibc-langpack-urUpgrade glibc-langpack-veUpgrade glibc-langpack-aycUpgrade glibc-langpack-gaUpgrade glibc-langpack-kyUpgrade glibc-langpack-brUpgrade glibc-langpack-seUpgrade glibc-langpack-anpUpgrade glibc-langpack-tkUpgrade glibc-langpack-nnUpgrade glibc-langpack-nrUpgrade glibc-langpack-amUpgrade glibc-langpack-hneUpgrade glibc-langpack-rwUpgrade glibc-langpack-sdUpgrade glibc-langpack-mrUpgrade glibc-langpack-csUpgrade glibc-langpack-iaUpgrade glibc-langpack-hrUpgrade glibc-langpack-enUpgrade glibc-langpack-tpiUpgrade glibc-minimal-langpackUpgrade glibc-langpack-frUpgrade glibc-all-langpacksUpgrade glibc-langpack-brxUpgrade glibc-langpack-esUpgrade glibc-langpack-elUpgrade glibc-langpack-psUpgrade glibc-langpack-klUpgrade glibc-langpack-siUpgrade glibc-langpack-agrUpgrade glibc-langpack-idUpgrade glibc-langpack-mgUpgrade glibc-langpack-lgUpgrade glibc-langpack-toUpgrade glibc-langpack-lnUpgrade glibc-langpack-shsUpgrade glibc-langpack-berUpgrade glibc-langpack-tcyUpgrade glibc-utilsUpgrade nss_hesiodUpgrade glibc-langpack-hyUpgrade glibc-langpack-mhrUpgrade glibc-langpack-lijUpgrade glibc-langpack-ikUpgrade glibc-langpack-kaUpgrade glibc-langpack-kokUpgrade glibc-langpack-swUpgrade glibc-langpack-mkUpgrade glibc-langpack-gdUpgrade glibc-langpack-etUpgrade glibc-langpack-dvUpgrade glibc-langpack-arUpgrade glibc-langpack-quzUpgrade glibc-langpack-htUpgrade glibc-langpack-haUpgrade glibc-langpack-fyUpgrade glibc-langpack-crhUpgrade glibc-langpack-boUpgrade glibc-langpack-astUpgrade glibc-langpack-asUpgrade glibc-langpack-waeUpgrade glibc-langpack-uzUpgrade glibc-langpack-ugUpgrade glibc-langpack-miUpgrade glibc-langpack-shnUpgrade glibc-langpack-srUpgrade glibc-langpack-soUpgrade glibc-langpack-satUpgrade glibc-langpack-ruUpgrade glibc-langpack-ocUpgrade glibc-langpack-ksUpgrade glibc-langpack-koUpgrade glibc-langpack-sqUpgrade glibc-langpack-plUpgrade glibc-langpack-lbUpgrade glibc-langpack-kwUpgrade nss_dbUpgrade glibc-langpack-bhoUpgrade glibc-staticUpgrade glibc-langpack-yiUpgrade glibc-langpack-woUpgrade glibc-langpack-roUpgrade glibc-langpack-papUpgrade glibc-langpack-sahUpgrade glibc-langpack-omUpgrade glibc-langpack-nbUpgrade glibc-langpack-myUpgrade glibc-langpack-mfeUpgrade glibc-langpack-ltUpgrade glibc-langpack-magUpgrade glibc-langpack-kmUpgrade glibc-langpack-faUpgrade glibc-langpack-unmUpgrade glibc-langpack-glUpgrade glibc-langpack-iuUpgrade glibc-langpack-hsbUpgrade glibc-langpack-doiUpgrade glibc-langpack-tgUpgrade glibc-langpack-eoUpgrade glibc-langpack-gvUpgrade glibc-langpack-nsoUpgrade glibc-langpack-miqUpgrade glibc-langpack-bgUpgrade glibc-langpack-anUpgrade glibc-langpack-bhbUpgrade glibc-langpack-yuwUpgrade glibc-langpack-walUpgrade glibc-langpack-mtUpgrade glibc-langpack-huUpgrade glibc-langpack-ceUpgrade glibc-langpack-hifUpgrade glibc-langpack-sgsUpgrade glibc-langpack-mjwUpgrade glibc-langpack-daUpgrade glibc-langpack-aaUpgrade glibc-langpack-ptUpgrade glibc-langpack-paUpgrade glibc-langpack-bnUpgrade glibc-langpack-yueUpgrade glibc-langpack-tsUpgrade glibc-langpack-azUpgrade glibc-langpack-slUpgrade glibc-langpack-hiUpgrade glibc-langpack-furUpgrade glibc-langpack-fiUpgrade glibc-langpack-bynUpgrade glibc-langpack-biUpgrade nscdUpgrade libnslUpgrade glibc-langpack-maiUpgrade glibc-langpack-theUpgrade glibc-langpack-thUpgrade glibc-langpack-taUpgrade glibc-langpack-svUpgrade glibc-langpack-ssUpgrade glibc-langpack-lzhUpgrade glibc-langpack-dsbUpgrade glibc-langpack-smUpgrade glibc-langpack-msUpgrade glibc-langpack-tlUpgrade glibc-langpack-nhnUpgrade glibc-langpack-kabUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-locale-sourceUpgrade glibc-langpack-foUpgrade glibc-langpack-knUpgrade glibc-langpack-caUpgrade glibc-langpack-bsUpgrade glibc-langpack-beUpgrade glibc-langpack-viUpgrade glibc-langpack-neUpgrade glibc-langpack-tiUpgrade glibc-langpack-filUpgrade glibc-langpack-ukUpgrade glibc-langpack-mniUpgrade glibc-langpack-chrUpgrade glibc-langpack-rajUpgrade glibc-langpack-liUpgrade glibc-langpack-bemUpgrade glibc-langpack-xhUpgrade glibc-langpack-yoUpgrade glibc-langpack-zuUpgrade glibc-langpack-deUpgrade glibc-langpack-teUpgrade glibc-langpack-cyUpgrade glibcUpgrade glibc-langpack-or | Feb 26, 2020 | Jul 15, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub