Skip to content
OpenAdvisories
Unscored CVE-2010-3192 EUVD-2010-3192GHSA-388x-h72v-g58j

Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which migh…

Published Oct 12, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS glibc No fix yet —
Ubuntu Pro 14.04 LTS eglibc No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed glibc 2.34-1.2 openSUSE-SU-2024:10792-1

Advisories 1

References