CVE-2020-1751CWE-787

CVE-2020-1751

Medium · published April 17, 2020

CVSS v3.1
5.1
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2020-04-17T23:15Z
Affected products (5)
ProductVersionsFixed in
gnu/glibc< 2.312.31
redhat/enterprise_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
References (11)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751 · [email protected]https://security.gentoo.org/glsa/202006-04 · [email protected]https://security.netapp.com/advisory/ntap-20200430-0002/ · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=25423 · [email protected]https://usn.ubuntu.com/4416-1/ · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202006-04 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20200430-0002/ · af854a3a-2127-422b-91ae-364da2661108https://sourceware.org/bugzilla/show_bug.cgi?id=25423 · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4416-1/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 APR 18:32Z
    An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC
    cvelistv5