ZeroHour

CVE-2019-7309

PoC
CVSS 3.0
5.5 medium
EPSS
<1%p47
Published
()
Modified
Description

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Vendors
gnu
Products
glibc
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.