CVE-2019-1010025

תיאור (מקור, אנגלית)

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.

מדדים

EPSS — סבירות ניצול

2% (אחוזון 100) נכון ל-14/10/2026

CWE

CWE-330

מוצרים מושפעים

gnu: glibc

קישורים

• https://sourceware.org/bugzilla/show_bug.cgi?id=22853 ExploitIssue TrackingThird Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22853 ExploitIssue TrackingThird Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-1010025
• https://support.f5.com/csp/article/K06046097
• https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_me‮…
• https://ubuntu.com/security/CVE-2019-1010025
• https://security-tracker.debian.org/tracker/CVE-2019-1010025
• https://support.f5.com/csp/article/K06046097
• https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_me‮…
• https://ubuntu.com/security/CVE-2019-1010025