CVE-2019-7309

Published: Feb 3, 2019Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Affected (1)

Products: Gnu: Glibc

Gnu

1 product

Glibc

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	Up to 2.29

References (8)

http://www.securityfocus.com/bid/106835

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/202006-04

Source: cve@mitre.org

https://sourceware.org/bugzilla/show_bug.cgi?id=24155

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/106835

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/202006-04

Source: af854a3a-2127-422b-91ae-364da2661108

https://sourceware.org/bugzilla/show_bug.cgi?id=24155

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.