Vulnerabilities > CVE-2019-7309 - Unspecified vulnerability in GNU Glibc

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
gnu
NVD
Published: 2019-02-03
Updated: 2024-11-21

Summary

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Vulnerable Configurations

Part Description Count
Application
Gnu
10

References