On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-11-19T00:00:00

Updated: 2024-08-05T02:09:39.390Z

Reserved: 2019-11-19T00:00:00

Link: CVE-2019-19126

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-11-19T22:15:11.427

Modified: 2024-11-21T04:34:14.263

Link: CVE-2019-19126

cve-icon Redhat

Severity : Low

Publid Date: 2019-11-19T00:00:00Z

Links: CVE-2019-19126 - Bugzilla