CVE-2020-1751

HighCVSS 7.0/10Last modified Oct 14, 2026

Description

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Red Hat	glibc	2.31
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202006-04Third Party Advisory
https://security.netapp.com/advisory/ntap-20200430-0002/Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=25423Issue Tracking, Third Party Advisory
https://usn.ubuntu.com/4416-1/Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202006-04Third Party Advisory
https://security.netapp.com/advisory/ntap-20200430-0002/Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=25423Issue Tracking, Third Party Advisory
https://usn.ubuntu.com/4416-1/Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Timeline

Published: Apr 17, 2020
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-175109.8Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.CVE-2020-175116.5In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Air CVE-2020-175135.3In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.CVE-2020-175147.4Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployme CVE-2020-175156.1The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow vers CVE-2020-175167.5Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encry CVE-2020-175177.5The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerabi CVE-2020-175187.5Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, th CVE-2020-175197.5A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesy CVE-2020-17527.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory CVE-2020-175206.5In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by con CVE-2020-175215.5Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those ext