Servers and applications
CVE-2019-19126
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
- Severity
- Low 3.3
- Published
- 19 Nov 2019
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.31
- Exploit chance
- 0.4% in the next 30 daysHigher than 35% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GNU C LibraryServers and applications · cpe:a:gnu:glibc |
|