Out-of-bounds write in GNU C Library (glibc) - CVE-2020-29573

Vulnerability identifier: #VU50362

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-29573

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary within the sysdeps/i386/ldbl2mpn.c in the GNU C Library on x86  systems. A remote attacker can pass specially crafted data to the application that uses the vulnerable version of glibc and crash it.

GNU C Library (glibc)
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 11
F5OS
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
CentOS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
Cloud Pak for Security (CP4S)
BIG-IQ Centralized Management
Juniper Junos Space
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
glibc-debugsource
glibc-info
glibc-locale
glibc-html
glibc-i18ndata
glibc-profile
glibc
nscd
glibc-devel
glibc-debuginfo-32bit
glibc-profile-32bit
glibc-debuginfo
glibc-32bit
glibc-locale-32bit
glibc-devel-32bit
glibc (Red Hat package)
glibc-devel-debuginfo-32bit
glibc-devel-static
nscd-debuginfo
glibc-locale-debuginfo-32bit
glibc-locale-debuginfo
glibc-devel-debuginfo
glibc-extra-debuginfo
glibc-extra
glibc-locale-base
glibc-locale-base-debuginfo
glibc-devel-32bit-debuginfo
glibc-utils-debuginfo
glibc-utils-src-debugsource
glibc-utils
glibc-32bit-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-locale-base-32bit
sys-libs/glibc
BIG-IP
Red Hat Advanced Cluster Management for Kubernetes
Data Computing Appliance (DCA)
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.23
Cloud Pak for Security (CP4S) - update to 1.8.0.0
Red Hat Advanced Cluster Management for Kubernetes - update to 2.1.3
glibc-debugsource - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-info - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-locale - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-html - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1
glibc-i18ndata - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-profile - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
nscd - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-devel - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-debuginfo-32bit - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1
glibc-profile-32bit - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1
glibc-debuginfo - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-32bit - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-locale-32bit - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1
glibc-devel-32bit - addressed in versions 2.11.3-17.110.43.1, 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc (Red Hat package) - addressed in versions 2.17-196.el7_4.4, 2.17-260.el7_6.9, 2.17-292.el7_7.2, 2.17-322.el7_9
glibc-devel-debuginfo-32bit - addressed in versions 2.22-114.8.3, 2.22-126.1
glibc-devel-static - addressed in versions 2.22-114.8.3, 2.26-13.56.1
nscd-debuginfo - addressed in versions 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-locale-debuginfo-32bit - addressed in versions 2.22-114.8.3, 2.22-126.1
glibc-locale-debuginfo - addressed in versions 2.22-114.8.3, 2.22-126.1
glibc-devel-debuginfo - addressed in versions 2.22-114.8.3, 2.22-126.1, 2.26-13.56.1
glibc-extra-debuginfo - update to 2.26-13.56.1
glibc-extra - update to 2.26-13.56.1
glibc-locale-base - update to 2.26-13.56.1
glibc-locale-base-debuginfo - update to 2.26-13.56.1
glibc-devel-32bit-debuginfo - update to 2.26-13.56.1
glibc-utils-debuginfo - update to 2.26-13.56.1
glibc-utils-src-debugsource - update to 2.26-13.56.1
glibc-utils - update to 2.26-13.56.1
glibc-32bit-debuginfo - update to 2.26-13.56.1
glibc-locale-base-32bit-debuginfo - update to 2.26-13.56.1
glibc-locale-base-32bit - update to 2.26-13.56.1
sys-libs/glibc - update to 2.32-r5
Data Computing Appliance (DCA) - update to 4.3.0.0
Dell EMC Unity Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity VSA Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity XT Operating Environment (OE) - update to 5.1.2.0.5.007
Juniper Junos Space - update to 21.2R1

• https://security.gentoo.org/glsa/202101-20
• https://security.netapp.com/advisory/ntap-20210122-0004/
• https://sourceware.org/bugzilla/show_bug.cgi?id=26649
• https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html

• Multiple vulnerabilities in Glibc
• CentOS 7 update for glibc
• Denial of service in glibc implementation in F5 BIG-IP and F5OS
• Amazon Linux AMI update for glibc
• Red Hat Enterprise Linux 7.4 update for glibc
• Red Hat Enterprise Linux 7.7 update for glibc
• Multiple vulnerabilities in Junos Space
• Red Hat Enterprise Linux 7.6 update for glibc
• Multiple vulnerabilities in Dell EMC Unity
• SUSE update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in IBM Cloud Pak for Security
• SUSE update for glibc
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for glibc
• SUSE update for glibc
• Gentoo update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.1