CVE-2019-7309

תיאור (מקור, אנגלית)

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

מדדים

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-18/10/2026

מוצרים מושפעים

gnu: glibc

קישורים

• https://sourceware.org/bugzilla/show_bug.cgi?id=24155 ExploitIssue TrackingThird Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=24155 ExploitIssue TrackingThird Party Advisory
• http://www.securityfocus.com/bid/106835 Third Party AdvisoryVDB Entry
• https://security.gentoo.org/glsa/202006-04
• https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html Mailing ListThird Party Advisory
• http://www.securityfocus.com/bid/106835 Third Party AdvisoryVDB Entry
• https://security.gentoo.org/glsa/202006-04
• https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html Mailing ListThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html