CVE catalog
CVE-2020-10029
glibc: CVE-2020-10029
- Severity
- Medium · CVSS 5.7
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.76% · Oct 27, 2026
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | glibc | sid | 2.43-7 | fixed |
| Debian | glibc | forky | 2.43-7 | fixed |
| Debian | glibc | trixie | 2.41-12+deb13u4 | fixed |
| Debian | glibc | bookworm | 2.36-9+deb12u14 | fixed |
| Debian | glibc | bookworm-security | 2.36-9+deb12u7 | fixed |
| Cpe | glibc | Not reported | 2.32.0 | fixed |
| Cpe | fedora | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | leap | Not reported | Not reported | unknown |
| Cpe | active_iq_unified_manager | Not reported | Not reported | unknown |
| Cpe | cloud_backup | Not reported | Not reported | unknown |
| Cpe | hci_management_node | Not reported | Not reported | unknown |
| Cpe | solidfire | Not reported | Not reported | unknown |
| Cpe | steelstore_cloud_integrated_storage | Not reported | Not reported | unknown |
| Cpe | h410c_firmware | Not reported | Not reported | unknown |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Ubuntu | eglibc | pro | 2.17-93ubuntu4 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu1 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu2 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu4 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu5 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu6 | vulnerable |
| Ubuntu | eglibc | pro | 2.18-0ubuntu7 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu2 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu3 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu4 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu5 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.1 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.3 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.4 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.5 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.6 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.7 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.8 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.9 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.10 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.11 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.13 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.14 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.15 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.15+esm1 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.15+esm2 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.15+esm3 | vulnerable |
| Ubuntu | eglibc | pro | 2.19-0ubuntu6.15+esm4 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.21-0ubuntu4 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.21-0ubuntu5 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.21-0ubuntu6 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu1 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu2 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu3 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu4 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu5 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu6 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu7 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu9 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu10 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu11 | vulnerable |
| Ubuntu | glibc | 16.04 | 2.23-0ubuntu11.2 | fixed |
| Ubuntu | glibc | 18.04 | 2.26-0ubuntu2 | vulnerable |
| Ubuntu | glibc | 18.04 | 2.26-0ubuntu2.1 | vulnerable |
| Ubuntu | glibc | 18.04 | 2.27-0ubuntu2 | vulnerable |
| Ubuntu | glibc | 18.04 | 2.27-0ubuntu3 | vulnerable |
| Ubuntu | glibc | 18.04 | 2.27-3ubuntu1 | vulnerable |
| Ubuntu | glibc | 18.04 | 2.27-3ubuntu1.2 | fixed |
| Suse | glibc | linux enterprise module for basesystem 15 sp1 | 2.26-13.39.1 | fixed |
| Suse | glibc | linux enterprise module for development tools 15 sp1 | 2.26-13.39.1 | fixed |
| Suse | glibc | linux enterprise software development kit 12 sp4 | 2.22-100.21.5 | fixed |
| Suse | glibc | linux enterprise software development kit 12 sp5 | 2.22-100.21.5 | fixed |
| Suse | glibc | linux enterprise server 12 sp4 | 2.22-100.21.5 | fixed |
| Suse | glibc | linux enterprise server for sap applications 12 sp4 | 2.22-100.21.5 | fixed |
| Suse | glibc | linux enterprise server 12 sp5 | 2.22-100.21.5 | fixed |
| Suse | glibc | linux enterprise server for sap applications 12 sp5 | 2.22-100.21.5 | fixed |
| Opensuse | glibc | leap 15.1 | 2.26-lp151.19.3.1 | fixed |
| Opensuse | glibc-testsuite-src | leap 15.1 | 2.26-lp151.19.3.1 | fixed |
| Suse | glibc | hpe helion openstack 8 | 2.22-113.4 | fixed |
| Suse | glibc | openstack cloud 7 | 2.22-113.4 | fixed |
| Suse | glibc | openstack cloud 8 | 2.22-113.4 | fixed |
| Suse | glibc | openstack cloud crowbar 8 | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server for sap applications 12 sp2 | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server for sap applications 12 sp3 | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server 12 sp2-ltss | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server 12 sp2-bcl | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server 12 sp3-ltss | 2.22-113.4 | fixed |
| Suse | glibc | linux enterprise server 12 sp3-bcl | 2.22-113.4 | fixed |
| Suse | glibc | enterprise storage 5 | 2.22-113.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | glibc | source | sid | 2.30-1 | not yet assigned | Not reported | [953108] |
| Debian | glibc | source | forky | 2.30-1 | not yet assigned | Not reported | [953108] |
| Debian | glibc | source | trixie | 2.30-1 | not yet assigned | Not reported | [953108] |
| Debian | glibc | source | bookworm | 2.30-1 | not yet assigned | Not reported | [953108] |
| Cpe | glibc | cpe | Not reported | 2.32.0 | Not reported | NVD-CVE-2020-10029 | Not reported |
| Ubuntu | glibc | deb | 16.04 | 2.23-0ubuntu11.2 | Not reported | UBUNTU-CVE-2020-10029 | Not reported |
| Ubuntu | glibc | deb | 18.04 | 2.27-3ubuntu1.2 | Not reported | UBUNTU-CVE-2020-10029 | Not reported |
| Suse | glibc | rpm | linux enterprise module for basesystem 15 sp1 | 2.26-13.39.1 | Not reported | SUSE-SU-2020:0668-1 | Not reported |
| Suse | glibc | rpm | linux enterprise module for development tools 15 sp1 | 2.26-13.39.1 | Not reported | SUSE-SU-2020:0668-1 | Not reported |
| Suse | glibc | rpm | linux enterprise software development kit 12 sp4 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Suse | glibc | rpm | linux enterprise software development kit 12 sp5 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp4 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server for sap applications 12 sp4 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp5 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server for sap applications 12 sp5 | 2.22-100.21.5 | Not reported | SUSE-SU-2020:0832-1 | Not reported |
| Opensuse | glibc | rpm | leap 15.1 | 2.26-lp151.19.3.1 | Not reported | OPENSUSE-SU-2020:0381-1 | Not reported |
| Opensuse | glibc-testsuite-src | rpm | leap 15.1 | 2.26-lp151.19.3.1 | Not reported | OPENSUSE-SU-2020:0381-1 | Not reported |
| Suse | glibc | rpm | hpe helion openstack 8 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | openstack cloud 7 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | openstack cloud 8 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | openstack cloud crowbar 8 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server for sap applications 12 sp2 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server for sap applications 12 sp3 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp2-ltss | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp2-bcl | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp3-ltss | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | linux enterprise server 12 sp3-bcl | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
| Suse | glibc | rpm | enterprise storage 5 | 2.22-113.4 | Not reported | SUSE-SU-2020:3024-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [glibc-doc]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [glibc-source]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-dbg]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-dev]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-dev-i386]Unknown
Source package: [glibc]
Details (2)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-dev-x32]Unknown
Source package: [glibc]
Details (2)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-i386]Unknown
Source package: [glibc]
Details (2)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc6-x32]Unknown
Source package: [glibc]
Details (2)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc-bin]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc-dev-bin]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc-devtools]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [libc-l10n]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [locales]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· all · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· all · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [locales-all]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
- [nscd]Unknown
Source package: [glibc]
Details (4)
2.36-9+deb12u14· amd64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u14· arm64 · bookwormFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· amd64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
2.36-9+deb12u7· arm64 · bookworm-securityFixed · Fixed:
2.30-1dsa · glibc · debian · bookworm
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-831302.json]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2020_4444.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2020-10029]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2020-10029]
- [https://osv.dev/vulnerability/SUSE-SU-2020:0668-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:0832-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:3024-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2020-10029]
- [https://osv.dev/vulnerability/openSUSE-SU-2020:0381-1]
- [https://security-tracker.debian.org/tracker/CVE-2020-10029]
- [https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-10029.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1432.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]