Vulnerability CVE-2005-3590


Published: 2019-04-10

Description:
The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

Vendor: GNU
Product: Glibc 
Version:
2.3.4
2.3.3
2.3.2
2.3.1
2.3
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1.9
2.1.3.10
2.1.3
2.1.2
2.1.1.6
2.1.1
2.1
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.09.5
1.09.3
1.09.2
1.09.1
1.09
1.08.9
1.08.8
1.08.7
1.08.6
1.08.5
1.08.4
1.08.3
1.08.14
1.08.13
1.08.12
1.08.11
1.08.10
1.08.1
1.08
1.07.6
1.07.5
1.07.4
1.07.3
1.07.2
1.07.1
1.07
1.06.9
1.06.8
1.06.7
1.06.6
1.06.4
1.06.3
1.06.2
1.06.13
1.06.12
1.06.11
1.06.10
1.06.1
1.06
1.05
1.04
1.03
1.02
1.01
1.00
0.6
0.5
0.4.1
0.4
0.1

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
http://www.securityfocus.com/bid/107871
https://sourceware.org/bugzilla/show_bug.cgi?id=661

Related CVE
CVE-2019-17451
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.
CVE-2019-17450
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
CVE-2019-16166
GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.
CVE-2019-16165
GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.
CVE-2019-15847
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operati...
CVE-2019-15767
In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
CVE-2019-15531
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
CVE-2018-20969
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

Copyright 2019, cxsecurity.com

 

Back to Top