Log in Start free

Vulnerability · Published Apr 1, 2020 · Assigned by talos

CVE-2020-6096

High 8.1

In plain English

A high-severity security flaw in GNU glibc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.5% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.0)8.1High
Exploit odds (30 days)5.5%top 7.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12glibc2.31-2DEBIAN-CVE-2020-6096
Debian:13glibc2.31-2DEBIAN-CVE-2020-6096
Debian:14glibc2.31-2DEBIAN-CVE-2020-6096

Affected products (as reported)

VendorProductVersions
n/a GNU glibc 2.30.9000

Weakness: CWE-195 · Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References