{"id":"CVE-2019-19126","revision":"ca13573fe9e941c2b25545dfec3c4a54","records":[{"revision":"ca13573fe9e941c2b25545dfec3c4a54","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-19126","aliases":[],"title":"On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible …","description":"On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.","state":0,"publishedAt":"2019-11-19T00:00:00+00:00","modifiedAt":"2026-10-14T06:54:55.184+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://sourceware.org/bugzilla/show_bug.cgi?id=25204","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFJ5E7NWOL6ROE5QVICHKIOUGCPFJVUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FQ5LC6JOYSOYFPRUZ4S45KL6IP3RPPZ/","https://usn.ubuntu.com/4416-1/","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-19126","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-19126","identifiers":["CVE-2019-19126"]},"retained":false,"historicalAffected":[]}],"coverage":[]}