GNU glibc CVE-2019-1010023 Remote Code Execution Vulnerability

GNU glibc is prone to remote code execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Information

Bugtraq ID: 109167
Class: Design Error
CVE: CVE-2019-1010023

Remote: Yes
Local: No
Published: Jul 15 2019 12:00AM
Updated: Jul 15 2019 12:00AM
Credit: The vendor reported this issue.
Vulnerable: GNU glibc 0

Not Vulnerable:

Exploit

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

References:

• glibc Homepage (GNU)
  
• GNU Homepage (GNU)
  
• Bug 22851 - ld library ELF load error (sourceware.org)
  

Source: www.securityfocus.com