NVD

Id
40318  
Name
CVE-2013-4788  
Description
The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGLIBC) does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow vulnerability in an application and using the known zero value pointer guard to calculate a pointer address.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-04  
Modified Date
2016-12-30  
Seq
2013-4788  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204885 40318 CVE-2013-4788 http://hmarco.org/bugs/CVE-2013-4788.html  View
204886 40318 CVE-2013-4788 20150907 Glibc Pointer guarding weakness  View
204887 40318 CVE-2013-4788 MDVSA-2013:283  View
204888 40318 CVE-2013-4788 MDVSA-2013:284  View
204889 40318 CVE-2013-4788 [oss-security] 20130716 Re: CVE-2013-4788 - Eglibc PTR MANGLE bug  View
204890 40318 CVE-2013-4788 61183  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22956 JVNDB-2013-004531 GNU C Library および Embedded GLIBC の PTR_MANGLE の実装における実行フローを制御される脆弱性 GNU C Library (別名 glibc または libc6) および Embedded GLIBC (EGLIBC) の PTR_MANGLE の実装は、ポインタガード (pointer guard) のランダム値を初期化しないため、実行フローを制御される脆弱性が存在します。 CVE-2013-4788 64730 CVE-2013-4788 40318 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004531.html 2013-07-15 2013-12-26 View