Read the docs
TI-2020-08094 Aliases CVE-2020-10029GHSA-68cv-639q-x75m

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer…

Priority LOW 26CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 21 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

Why it matters now

EPSS 0.00764 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 5 advisoriesRed Hat: 21 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*before 2.32.0VulnerableGNU
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*32VulnerableFedoraproject
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*19.10VulnerableCanonical
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* Versions before 2.32.0 Vulnerable ·GNU
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* Versions 32 Vulnerable ·Fedoraproject
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Vulnerable ·Canonical
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
  • cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian

Remediation

Red Hat 5 advisories

  • RHSA-2021:3315 Released 2021-08-31 · Red Hat rating Moderate
    glibc security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
    • Red Hat Enterprise Linux Server E4S (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.6) glibc-static-2.17-260.el7_6.9
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.6) glibc-static-2.17-260.el7_6.9
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.6) glibc-static-2.17-260.el7_6.9
    • Red Hat Enterprise Linux Server TUS (v. 7.6) glibc-2.17-260.el7_6.9, glibc-common-2.17-260.el7_6.9, glibc-devel-2.17-260.el7_6.9 +3
  • RHSA-2021:2998 Released 2021-08-03 · Red Hat rating Moderate
    glibc security update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) glibc-2.17-292.el7_7.2, glibc-common-2.17-292.el7_7.2, glibc-devel-2.17-292.el7_7.2 +3
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) glibc-static-2.17-292.el7_7.2
    • Red Hat Enterprise Linux Server EUS (v. 7.7) glibc-2.17-292.el7_7.2, glibc-2.17-292.el7_7.2.ppc, glibc-common-2.17-292.el7_7.2 +5
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.7) glibc-static-2.17-292.el7_7.2, glibc-static-2.17-292.el7_7.2.ppc
  • RHSA-2021:0949 Released 2021-03-22 · Red Hat rating Low
    Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
    • OpenShift Do 1 openshiftdo/odo-init-image-rhel7
Show 2 more Red Hat advisories
  • RHSA-2021:0348 Released 2021-02-02 · Red Hat rating Moderate
    glibc security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) glibc-2.17-322.el7_9, glibc-common-2.17-322.el7_9, glibc-devel-2.17-322.el7_9 +3
    • Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-322.el7_9
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-322.el7_9
    • Red Hat Enterprise Linux Server (v. 7) glibc-2.17-322.el7_9, glibc-2.17-322.el7_9.ppc, glibc-common-2.17-322.el7_9 +5
    • Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-322.el7_9, glibc-static-2.17-322.el7_9.ppc
    • Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-322.el7_9, glibc-common-2.17-322.el7_9, glibc-devel-2.17-322.el7_9 +3
    • Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-322.el7_9
  • RHSA-2020:4444 Released 2020-11-04 · Red Hat rating Moderate
    glibc security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder (v. 8) glibc-benchtests-2.28-127.el8, glibc-nss-devel-2.28-127.el8, glibc-static-2.28-127.el8 +1
    • Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-127.el8, glibc-utils-2.28-127.el8
    • Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-127.el8, glibc-all-langpacks-2.28-127.el8, glibc-common-2.28-127.el8 +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
OpenShift Do 1Fixed RHSA-2021:0949
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2020:4444
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:4444
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2020:4444
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)Fixed RHSA-2021:2998
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)Fixed RHSA-2021:2998
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux Server AUS (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Server E4S (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2021:2998
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux Server Optional AUS (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Server Optional E4S (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Server Optional EUS (v. 7.7)Fixed RHSA-2021:2998
Red Hat Enterprise Linux Server Optional TUS (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Server TUS (v. 7.6)Fixed RHSA-2021:3315
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2021:0348
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2021:0348

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10029
  2. 2026-10-03 Alias added: GHSA-68cv-639q-x75m

References

Exploit 1

Advisory 8

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences