Published: 01/06/2010 Updated: 07/11/2023

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 455

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 up to and including 2.11.1, when the --verify option is used, allows user-assisted remote malicious users to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc 2.2.2
gnu glibc 2.9
gnu glibc 2.7
gnu glibc 2.1.2
gnu glibc 2.11
gnu glibc 2.0.5
gnu glibc 2.2.5
gnu glibc 2.0.6
gnu glibc 2.10.1
gnu glibc 2.1.1
gnu glibc 2.0.3
gnu glibc 2.3.1
gnu glibc 2.3
gnu glibc 2.1.1.6
gnu glibc 2.3.10
gnu glibc 2.4
gnu glibc 2.1
gnu glibc 2.3.4
gnu glibc 2.1.9
gnu glibc 2.3.3
gnu glibc 2.6.1
gnu glibc 2.0.1
gnu glibc 2.10
gnu glibc 2.5.1
gnu glibc 2.6
gnu glibc 2.0.4
gnu glibc 2.0.2
gnu glibc 2.2.1
gnu glibc 2.3.2
gnu glibc 2.3.6
gnu glibc 2.2.3
gnu glibc 2.5
gnu glibc 2.3.5
gnu glibc 2.8
gnu glibc 2.11.1
gnu glibc 2.2.4
gnu glibc 2.1.3
gnu glibc 2.2

The GNU C library did not correctly handle certain mnt entries, strfmon arguments, and ELF program headers ...

Synopsis Moderate: glibc security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix multiple security issues and one bug arenow available for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact ...

Synopsis Moderate: glibc security update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability S ...

CWE-189 http://frugalware.org/security/662 http://securitytracker.com/id?1024044 http://secunia.com/advisories/39900 http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html http://www.vupen.com/english/advisories/2010/1246 http://www.securityfocus.com/bid/40063 http://www.ubuntu.com/usn/USN-944-1 http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 http://www.debian.org/security/2010/dsa-2058 http://security.gentoo.org/glsa/glsa-201011-01.xml https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html https://exchange.xforce.ibmcloud.com/vulnerabilities/58915 http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=db07e962b6ea963dbb345439f6ab9b0cf74d87c5 https://usn.ubuntu.com/944-1/https://nvd.nist.gov

CVE-2010-0830

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect