CVE-2019-7309 | BDVDB-2026-112401 Detail

SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Description#

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/106835
https://sourceware.org/bugzilla/show_bug.cgi?id=24155
https://sourceware.org/ml/libc-alpha/2019-02/msg00041.html
https://security.gentoo.org/glsa/202006-04
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Exploit#

No public exploit known

History#

Version 12019-02-03Record published in the CVE List.
Version 22026-10-14Most recent update recorded in the CVE List.