Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-1751

Опубликовано: 17 апр. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.9
CVSS3: 5.1

Описание

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

ignored

out of support
esm-infra/focal

DNE

focal

DNE

precise/esm

not-affected

trusty

ignored

end of standard support
trusty/esm

ignored

end of ESM support, was ignored [out of support]
upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

released

2.27-3ubuntu1.2
devel

not-affected

2.31-0ubuntu9
eoan

released

2.30-0ubuntu2.2
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

2.27-3ubuntu1.2
esm-infra/focal

not-affected

2.31-0ubuntu9
esm-infra/xenial

not-affected

2.23-0ubuntu11.2
focal

not-affected

2.31-0ubuntu9
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 43%
0.00205
Низкий

5.9 Medium

CVSS2

5.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 7
redhat
больше 5 лет назад

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

CVSS3: 5.1
nvd
около 5 лет назад

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

CVSS3: 7
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 5.1
debian
около 5 лет назад

An out-of-bounds write vulnerability was found in glibc before 2.31 wh ...

CVSS3: 7
github
около 3 лет назад

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 43%
0.00205
Низкий

5.9 Medium

CVSS2

5.1 Medium

CVSS3