CVE-Katalog

CVE-2020-1751

glibc: CVE-2020-1751

[CVE-Katalog]

Schweregrad
High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.54% · Oct 22, 2026

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4fixed
Debianglibcbookworm2.36-9+deb12u14fixed
Debianglibcbookworm-security2.36-9+deb12u7fixed
CpeglibcNot reported2.31fixed
Cpeenterprise_linuxNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
Ubuntueglibcpro2.17-93ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu1vulnerable
Ubuntueglibcpro2.18-0ubuntu2vulnerable
Ubuntueglibcpro2.18-0ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu5vulnerable
Ubuntueglibcpro2.18-0ubuntu6vulnerable
Ubuntueglibcpro2.18-0ubuntu7vulnerable
Ubuntueglibcpro2.19-0ubuntu2vulnerable
Ubuntueglibcpro2.19-0ubuntu3vulnerable
Ubuntueglibcpro2.19-0ubuntu4vulnerable
Ubuntueglibcpro2.19-0ubuntu5vulnerable
Ubuntueglibcpro2.19-0ubuntu6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.4vulnerable
Ubuntueglibcpro2.19-0ubuntu6.5vulnerable
Ubuntueglibcpro2.19-0ubuntu6.6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.7vulnerable
Ubuntueglibcpro2.19-0ubuntu6.8vulnerable
Ubuntueglibcpro2.19-0ubuntu6.9vulnerable
Ubuntueglibcpro2.19-0ubuntu6.10vulnerable
Ubuntueglibcpro2.19-0ubuntu6.11vulnerable
Ubuntueglibcpro2.19-0ubuntu6.13vulnerable
Ubuntueglibcpro2.19-0ubuntu6.14vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm2vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm4vulnerable
Ubuntuglibc16.042.21-0ubuntu4vulnerable
Ubuntuglibc16.042.21-0ubuntu5vulnerable
Ubuntuglibc16.042.21-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu1vulnerable
Ubuntuglibc16.042.23-0ubuntu2vulnerable
Ubuntuglibc16.042.23-0ubuntu3vulnerable
Ubuntuglibc16.042.23-0ubuntu4vulnerable
Ubuntuglibc16.042.23-0ubuntu5vulnerable
Ubuntuglibc16.042.23-0ubuntu6vulnerable
Ubuntuglibc16.042.23-0ubuntu7vulnerable
Ubuntuglibc16.042.23-0ubuntu9vulnerable
Ubuntuglibc16.042.23-0ubuntu10vulnerable
Ubuntuglibc16.042.23-0ubuntu11vulnerable
Ubuntuglibc16.042.23-0ubuntu11.2fixed
Ubuntuglibc18.042.26-0ubuntu2vulnerable
Ubuntuglibc18.042.26-0ubuntu2.1vulnerable
Ubuntuglibc18.042.27-0ubuntu2vulnerable
Ubuntuglibc18.042.27-0ubuntu3vulnerable
Ubuntuglibc18.042.27-3ubuntu1vulnerable
Ubuntuglibc18.042.27-3ubuntu1.2fixed
Opensuseglibctumbleweed2.38-6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.30-3not yet assignedNot reportedNot reported
Debianglibcsourceforky2.30-3not yet assignedNot reportedNot reported
Debianglibcsourcetrixie2.30-3not yet assignedNot reportedNot reported
Debianglibcsourcebookworm2.30-3not yet assignedNot reportedNot reported
CpeglibccpeNot reported2.31Not reportedNVD-CVE-2020-1751Not reported
Ubuntuglibcdeb16.042.23-0ubuntu11.2Not reportedUBUNTU-CVE-2020-1751Not reported
Ubuntuglibcdeb18.042.27-3ubuntu1.2Not reportedUBUNTU-CVE-2020-1751Not reported
Opensuseglibcrpmtumbleweed2.38-6.1Not reportedOPENSUSE-SU-2024:13388-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [glibc-32bit]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-devel]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-devel-32bit]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-devel-static]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-devel-static-32bit]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-extra]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-gconv-modules-extra]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-gconv-modules-extra-32bit]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-html]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · noarch · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-i18ndata]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · noarch · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-info]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · noarch · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-lang]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · noarch · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-locale]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-locale-base]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-profile]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

  • [glibc-profile-32bit]Unbekannt

    Quellpaket: [glibc]

    Details (1)

    • 2.43-4.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 2.38-6.1

      Version impact unknown

      dsa · glibc · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [glibc-doc]Behoben

    Quellpaket: [glibc]

    Details (4)

    • 2.36-9+deb12u14 · all · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

  • [glibc-source]Behoben

    Quellpaket: [glibc]

    Details (4)

    • 2.36-9+deb12u14 · all · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · all · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · all · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

  • [libc6]Behoben

    Quellpaket: [glibc]

    Details (4)

    • 2.36-9+deb12u14 · amd64 · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

  • [libc6-dbg]Behoben

    Quellpaket: [glibc]

    Details (4)

    • 2.36-9+deb12u14 · amd64 · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u14 · arm64 · bookworm

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Behoben · Behoben: 2.30-3

      dsa · glibc · debian · bookworm

Weitere Ergebnisse

Beobachtet:

Referenzen

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]