CVE-2020-1751
Summary
| CVE | CVE-2020-1751 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-04-17 19:15:00 UTC |
|---|
| Updated | 2023-11-07 03:19:00 UTC |
|---|
| Description | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1810719 – (CVE-2020-1751) CVE-2020-1751 glibc: array overflow in backtrace functions for powerpc |
CONFIRM |
bugzilla.redhat.com |
Issue Tracking, Patch, Third Party Advisory |
| CVE-2020-1751 GNU C Library (glibc) Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
Third Party Advisory |
| 25423 – (CVE-2020-1751) Array overflow in backtrace on powerpc (CVE-2020-1751) |
MISC |
sourceware.org |
Issue Tracking, Third Party Advisory |
| glibc: Multiple vulnerabilities (GLSA 202006-04) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| USN-4416-1: GNU C Library vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 377356 Alibaba Cloud Linux Security Update for glibc (ALINUX3-SA-2022:0122)
- 770068 Red Hat OpenShift Container Platform 4.6 Security Update (RHSA-2021:0436)
- 900018 CBL-Mariner Linux Security Update for glibc 2.28
- 903140 Common Base Linux Mariner (CBL-Mariner) Security Update for glibc (2552)
- 905968 Common Base Linux Mariner (CBL-Mariner) Security Update for glibc (2552-1)
