CVE-2020-29573 log

Source
Severity Medium
Remote No
Type Arbitrary code execution
Description
sysdeps/i386/ldbl2mpn.c in glibc before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf.
Group Package Affected Fixed Severity Status Ticket
AVG-1324 glibc, lib32-glibc 2.32-5 Medium Not affected
References
https://sourceware.org/bugzilla/show_bug.cgi?id=26649
https://bugzilla.redhat.com/show_bug.cgi?id=1905213#c5
https://sourceware.org/git/?p=glibc.git;h=d81f90ccd0109de9ed78aeeb8d86e2c6d4600690
https://sourceware.org/git/?p=glibc.git;h=8df4e219e43a4a257d0759b54fef8c488e2f282e