NVD

Id
14608  
Name
CVE-2010-3192  
Description
Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-10-14  
Modified Date
2010-10-14  
Seq
2010-3192  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
80990 14608 CVE-2010-3192 20100427 Fun with FORTIFY_SOURCE  View
80991 14608 CVE-2010-3192 [oss-security] 20100825 CVE id request: libc fortify source information disclosure  View
80992 14608 CVE-2010-3192 [oss-security] 20100831 Re: CVE id request: libc fortify source information disclosure  View
80993 14608 CVE-2010-3192 [oss-security] 20100831 Re: CVE id request: libc fortify source information disclosure  View
80994 14608 CVE-2010-3192 [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosure  View
80995 14608 CVE-2010-3192 [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosure  View
80996 14608 CVE-2010-3192 [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosure  View
80997 14608 CVE-2010-3192 [oss-security] 20100902 Re: CVE id request: libc fortify source information disclosure  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37244 JVNDB-2010-003029 GNU C Library の 特定の実行時メモリ保護機能におけるプロセスメモリから重要な情報を取得される脆弱性 GNU C Library の特定の実行時メモリ保護機能は、argv [0] を出力し、情報をバックトレースするため、プロセスメモリから重要な情報を取得される脆弱性が存在します。 CVE-2010-3192 45772 CVE-2010-3192 14608 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003029.html 2010-10-14 2012-03-27 View