1) Out-of-bounds write

Risk: Medium

CVSSv3: 6.5 [CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2019-14697

CWE-ID: CWE-787 - Out-of-bounds Write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. A remote attacker can pass specially crafted data to the application, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

musl libc: 0.5.0, 0.5.9, 0.6.0, 0.7.0, 0.7.1, 0.7.5, 0.7.6, 0.7.7, 0.7.8, 0.7.9, 0.7.10, 0.7.11, 0.7.12, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.8.10, 0.9.0, 0.9.1, 0.9.3, 0.9.4, 0.9.5, 0.9.6, 0.9.7, 0.9.8, 0.9.9, 0.9.10, 0.9.11, 0.9.12, 0.9.13, 0.9.14, 0.9.15, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.10, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.15, 1.1.16, 1.1.17, 1.1.18, 1.1.19, 1.1.20, 1.1.21, 1.1.22, 1.1.23

CPE

• cpe:/a:gnu:musl:1.1.23:
• cpe:/a:gnu:musl:1.1.22:
• cpe:/a:gnu:musl:1.1.21:
• cpe:/a:gnu:musl:1.1.20:
• cpe:/a:gnu:musl:1.1.19:
• cpe:/a:gnu:musl:1.1.18:
• cpe:/a:gnu:musl:1.1.17:
• cpe:/a:gnu:musl:1.1.16:
• cpe:/a:gnu:musl:1.1.15:
• cpe:/a:gnu:musl:1.1.14:
• cpe:/a:gnu:musl:1.1.13:
• cpe:/a:gnu:musl:1.1.12:
• cpe:/a:gnu:musl:1.1.11:
• cpe:/a:gnu:musl:1.1.10:
• cpe:/a:gnu:musl:1.1.9:
• cpe:/a:gnu:musl:1.1.8:
• cpe:/a:gnu:musl:1.1.7:
• cpe:/a:gnu:musl:1.1.6:
• cpe:/a:gnu:musl:1.1.5:
• cpe:/a:gnu:musl:1.1.4:
• cpe:/a:gnu:musl:1.1.3:
• cpe:/a:gnu:musl:1.1.2:
• cpe:/a:gnu:musl:1.1.1:
• cpe:/a:gnu:musl:1.1.0:
• cpe:/a:gnu:musl:1.0.5:
• cpe:/a:gnu:musl:1.0.4:
• cpe:/a:gnu:musl:1.0.3:
• cpe:/a:gnu:musl:1.0.2:
• cpe:/a:gnu:musl:1.0.1:
• cpe:/a:gnu:musl:1.0.0:
• cpe:/a:gnu:musl:0.9.15:
• cpe:/a:gnu:musl:0.9.14:
• cpe:/a:gnu:musl:0.9.13:
• cpe:/a:gnu:musl:0.9.12:
• cpe:/a:gnu:musl:0.9.11:
• cpe:/a:gnu:musl:0.9.10:
• cpe:/a:gnu:musl:0.9.9:
• cpe:/a:gnu:musl:0.9.8:
• cpe:/a:gnu:musl:0.9.7:
• cpe:/a:gnu:musl:0.9.6:
• cpe:/a:gnu:musl:0.9.5:
• cpe:/a:gnu:musl:0.9.4:
• cpe:/a:gnu:musl:0.9.3:
• cpe:/a:gnu:musl:0.9.1:
• cpe:/a:gnu:musl:0.9.0:
• cpe:/a:gnu:musl:0.8.10:
• cpe:/a:gnu:musl:0.8.9:
• cpe:/a:gnu:musl:0.8.8:
• cpe:/a:gnu:musl:0.8.7:
• cpe:/a:gnu:musl:0.8.6:
• cpe:/a:gnu:musl:0.8.5:
• cpe:/a:gnu:musl:0.8.4:
• cpe:/a:gnu:musl:0.8.3:
• cpe:/a:gnu:musl:0.8.2:
• cpe:/a:gnu:musl:0.8.1:
• cpe:/a:gnu:musl:0.8.0:
• cpe:/a:gnu:musl:0.7.12:
• cpe:/a:gnu:musl:0.7.11:
• cpe:/a:gnu:musl:0.7.10:
• cpe:/a:gnu:musl:0.7.9:
• cpe:/a:gnu:musl:0.7.8:
• cpe:/a:gnu:musl:0.7.7:
• cpe:/a:gnu:musl:0.7.6:
• cpe:/a:gnu:musl:0.7.5:
• cpe:/a:gnu:musl:0.7.1:
• cpe:/a:gnu:musl:0.7.0:
• cpe:/a:gnu:musl:0.6.0:
• cpe:/a:gnu:musl:0.5.9:
• cpe:/a:gnu:musl:0.5.0:

External links

http://www.openwall.com/lists/oss-security/2019/08/06/4
https://security.gentoo.org/glsa/202003-13
https://www.openwall.com/lists/musl/2019/08/06/1

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.