← Back

CVE-2010-0830

nvd nist
Published: Jun 1, 2010Modified: Apr 29, 2026

JSON object

Loading...
5.1
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
Exploitability: 4.9 / Impact: 6.4
Source: NVD

Description

Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.

Affected (38)

Products: Gnu: Glibc
1 product
Glibc
Configuration A
38 vulnerable
Vulnerable SoftwareAffected Versions
Gnu
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.1.1.6
Version 2.1.1
Version 2.1.2
Version 2.1.3
Version 2.1.9
Version 2.10.1
Version 2.10
Version 2.11.1
Version 2.11
Version 2.1
Version 2.2.1
Version 2.2.2
Version 2.2.3
Version 2.2.4
Version 2.2.5
Version 2.2
Version 2.3.10
Version 2.3.1
Version 2.3.2
Version 2.3.3
Version 2.3.4
Version 2.3.5
Version 2.3.6
Version 2.3
Version 2.4
Version 2.5.1
Version 2.5
Version 2.6.1
Version 2.6
Version 2.7
Version 2.8
Version 2.9

Related CWEs

References (28)

Source: security@ubuntu.com
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Source: security@ubuntu.com
Patch
Source: security@ubuntu.com
Source: security@ubuntu.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.