CVE-2019-1010023

    Dashboard / Vulnerabilities / CVE-2019-1010023

    CVE-2019-1010023

    Published: 15 Jul 2019Last Modified: 14 Mar 2026

    Summary:

    Details: GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

    References: https://security-tracker.debian.org/tracker/CVE-2019-1010023, https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS, https://ubuntu.com/security/CVE-2019-1010023, http://www.securityfocus.com/bid/109167, https://sourceware.org/bugzilla/show_bug.cgi?id=22851

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High