CVE-2010-3192
- State
- Published
- Severity
- Not scored
- Published
- Oct 12, 2010
- Updated
- Sep 16, 2024
- Reserved
- Aug 31, 2010
Description
Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosuremailing-list
- [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosuremailing-list
- 20100427 Fun with FORTIFY_SOURCEmailing-list
- [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosuremailing-list
- [oss-security] 20100831 Re: CVE id request: libc fortify source information disclosuremailing-list
- [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosuremailing-list
- [oss-security] 20100831 Re: CVE id request: libc fortify source information disclosuremailing-list
- [oss-security] 20100825 CVE id request: libc fortify source information disclosuremailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.