CVE-2020-10029

Public on 2020-03-04

Modified on 2022-12-01

Description

A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.

Severity

Medium

See what this means

CVSS v3 Base Score

5.7

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	glibc	2021-07-08 18:38	ALAS-2021-1511
Amazon Linux 2 - Core	glibc	2023-08-21 10:35	ALAS2-2023-2221

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	5.7	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
NVD	CVSSv2	2.1	AV:L/AC:L/Au:N/C:N/I:N/A:P
NVD	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Red Hat: CVE-2020-10029 Mitre: CVE-2020-10029 FAQs regarding Amazon Linux ALAS/CVE Severity