GNU glibc CVE-2019-6488 Local Denial of Service Vulnerability

Bugtraq ID:	106671
Class:	Boundary Condition Error
CVE:	CVE-2019-6488
Remote:	No
Local:	Yes
Published:	Jan 16 2019 12:00AM
Updated:	Jan 16 2019 12:00AM
Credit:	H.J. Lu
Vulnerable:	GNU glibc 2.28 GNU glibc 2.27 GNU glibc 2.26 GNU glibc 2.25 GNU glibc 2.24 GNU glibc 2.23 GNU glibc 2.22 GNU glibc 2.21 GNU glibc 2.20
Not Vulnerable:	GNU glibc 2.29

GNU glibc CVE-2019-6488 Local Denial of Service Vulnerability

GNU glibc is prone to a local denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

GNU glibc 2.28 and prior versions are vulnerable.

GNU glibc CVE-2019-6488 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GNU glibc CVE-2019-6488 Local Denial of Service Vulnerability

References:

• Bug 1667931 (CVE-2019-6488) - CVE-2019-6488 glibc: Incorrect attempt to use a 64 (Red Hat Bugzilla)
  
• Bug 24097 (CVE-2019-6488) - Can't use 64-bit register for size_t in assembly cod (Sourceware)
  
• CVE-2019-6488 (Red Hat Bugzilla)
  
• glibc Homepage (GNU)