On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3152-1 glibc security update
EUVD EUVD EUVD-2019-8759 On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
Ubuntu USN Ubuntu USN USN-4416-1 GNU C Library vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T02:09:39.390Z

Reserved: 2019-11-19T00:00:00

Link: CVE-2019-19126

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-11-19T22:15:11.427

Modified: 2024-11-21T04:34:14.263

Link: CVE-2019-19126

cve-icon Redhat

Severity : Low

Publid Date: 2019-11-19T00:00:00Z

Links: CVE-2019-19126 - Bugzilla

cve-icon OpenCVE Enrichment

No data.