Vuln: GNU glibc CVE-2019-1010023 Remote Code Execution Vulnerability

GNU glibc is prone to remote code execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

exploit

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

solution

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

info

Bugtraq ID:	109167
Class:	Design Error
CVE:	CVE-2019-1010023
Remote:	Yes
Local:	No
Published:	Jul 15 2019 12:00AM
Updated:	Jul 15 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	GNU glibc 0
Not Vulnerable:

references

References:

• glibc Homepage (GNU)
  
• GNU Homepage (GNU)
  
• Bug 22851 - ld library ELF load error (sourceware.org)
  

from SecurityFocus Vulnerabilities https://ift.tt/2k7Wacf