CVE-2010-3192

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://seclists.org/fulldisclosure/2010/Apr/399Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/08/25/8Mailing List
http://www.openwall.com/lists/oss-security/2010/08/31/6Mailing List
http://www.openwall.com/lists/oss-security/2010/08/31/7Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/2Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/3Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/4Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/5Mailing List
http://seclists.org/fulldisclosure/2010/Apr/399Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/08/25/8Mailing List
http://www.openwall.com/lists/oss-security/2010/08/31/6Mailing List
http://www.openwall.com/lists/oss-security/2010/08/31/7Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/2Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/3Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/4Mailing List
http://www.openwall.com/lists/oss-security/2010/09/02/5Mailing List

Timeline

Published: Oct 14, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-319310.0Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack CVE-2010-31947.5The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictio CVE-2010-31955.0Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a d CVE-2010-31963.5IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to CVE-2010-31975.0IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allow CVE-2010-31984.3ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads CVE-2010-31999.3Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to exe CVE-2010-32004.3MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multip CVE-2010-32014.3Cross-site scripting (XSS) vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via CVE-2010-32024.3Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a cr CVE-2010-32035.0Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via CVE-2010-32047.5Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the