{"id":"CVE-2019-1010023","revision":"221d3910e8b74de9a13c6090a0e2cb0e","records":[{"revision":"221d3910e8b74de9a13c6090a0e2cb0e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-1010023","aliases":[],"title":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim a…","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.","state":0,"publishedAt":"2019-07-15T03:09:37+00:00","modifiedAt":"2026-10-14T08:01:59.767+00:00","affected":[{"ecosystem":"Vendor product","name":"glibc","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"glibc\",\n                    \"vendor\": \"GNU Libc\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"current (At least as of 2018-02-16)\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://sourceware.org/bugzilla/show_bug.cgi?id=22851","http://www.securityfocus.com/bid/109167","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://ubuntu.com/security/CVE-2019-1010023"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-1010023","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-1010023","identifiers":["CVE-2019-1010023"]},"retained":false,"historicalAffected":[]}],"coverage":[]}