CVE-2020-1751
MEDIUMglibc < 2.31 - Out-of-bounds Write in Backtrace Function on PowerPC
Title source: llmDescription
An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.
References (5)
Core 5
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751
Issue Tracking, Third Party Advisory x_refsource_misc
https://sourceware.org/bugzilla/show_bug.cgi?id=25423
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200430-0002/
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/202006-04
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/4416-1/
Scores
CVSS v3
5.1
EPSS
0.0024
EPSS Percentile
47.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (5)
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
canonical/ubuntu_linux
19.10
gnu/glibc
< 2.31
redhat/enterprise_linux
8.0
Published
Apr 17, 2020
Tracked Since
Feb 18, 2026