CVE-2010-0830
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in...
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
Exploit likelihood
What each source reports
NVD Score used
5.1
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
CVE-2010-0830- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
CVE-2010-0830- Updated
- 2026-11-02
EUVDEUVD-2010-0855 No score
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
EUVD-2010-0855- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5gq9-qhr6-c66r No score
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in...
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
GHSA-5gq9-qhr6-c66r- Updated
- 2026-11-02
OSVBELL-CVE-2010-0830
5.1
CVE-2010-0830 does not affect BellSoft software
- Record
BELL-CVE-2010-0830- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
OSV No score
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
CVE-2010-0830- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0830 No score
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
- Record
DEBIAN-CVE-2010-0830- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glibcDebian:12 |
before 2.11-1 | 2.11-1 |
glibcDebian:13 |
before 2.11-1 | 2.11-1 |
glibcDebian:14 |
before 2.11-1 | 2.11-1 |
glibcDebian:5.0 From an advisory covering 5 CVEs |
before 2.7-18lenny4, plus listed versions 2.7-182.7-18lenny12.7-18lenny2 |
2.7-18lenny4 |
glibcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
glibc-profileRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-commonRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-debuginfo-commonRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-headersRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-profileRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibc-utilsRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nptl-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
nscdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.3.4-2.57 | 0:2.3.4-2.57 |
glibcRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-commonRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-develRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-headersRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-utilsRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
nscdRed Hat:enterprise_linux:5::client From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibcRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-commonRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-develRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-headersRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
glibc-utilsRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
nscdRed Hat:enterprise_linux:5::server From an advisory covering 5 CVEs |
before 0:2.5-65.el5_7.3 | 0:2.5-65.el5_7.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0830 is a medium vulnerability (CVSS 5.1) in Gnu Glibc, published June 1, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.51%, the 91st percentile. Fixed in glibc 2.11-1.
References
mandriva.com/security/advisories?name=MDVSA-2010:111
security.gentoo.org/glsa/glsa-201011-01.xml
vupen.com/english/advisories/2010/1246
ubuntu.com/usn/USN-944-1
secunia.com/advisories/39900
lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html
Show 53 moreShow less
securityfocus.com/bid/40063
drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html
sourceware.org/git?p=glibc.git%3Ba=commit%3Bh=db07e962b6ea963dbb345439f6ab9b0cf74d87c5
frugalware.org/security/662
mandriva.com/security/advisories?name=MDVSA-2010:112
debian.org/security/2010/dsa-2058
exchange.xforce.ibmcloud.com/vulnerabilities/58915
securitytracker.com/id?1024044
nvd.nist.gov/vuln/detail/CVE-2010-0830
sourceware.org/git?p=glibc.git;a=commit;h=db07e962b6ea963dbb345439f6ab9b0cf74d87c5
github.com/advisories/GHSA-5gq9-qhr6-c66r
docs.bell-sw.com/security/cves/CVE-2010-0830
security-tracker.debian.org/tracker/CVE-2010-0830
access.redhat.com/errata/RHSA-2012:0125
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=559579
bugzilla.redhat.com/show_bug.cgi?id=599056
bugzilla.redhat.com/show_bug.cgi?id=625893
bugzilla.redhat.com/show_bug.cgi?id=657009
bugzilla.redhat.com/show_bug.cgi?id=681054
bugzilla.redhat.com/show_bug.cgi?id=688980
bugzilla.redhat.com/show_bug.cgi?id=692393
bugzilla.redhat.com/show_bug.cgi?id=761245
bugzilla.redhat.com/show_bug.cgi?id=767299
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0125.json
access.redhat.com/security/cve/CVE-2009-5029
cve.org/CVERecord?id=CVE-2009-5029
nvd.nist.gov/vuln/detail/CVE-2009-5029
access.redhat.com/security/cve/CVE-2009-5064
cve.org/CVERecord?id=CVE-2009-5064
nvd.nist.gov/vuln/detail/CVE-2009-5064
access.redhat.com/security/cve/CVE-2010-0296
cve.org/CVERecord?id=CVE-2010-0296
nvd.nist.gov/vuln/detail/CVE-2010-0296
access.redhat.com/security/cve/CVE-2010-0830
cve.org/CVERecord?id=CVE-2010-0830
access.redhat.com/security/cve/CVE-2011-1071
cve.org/CVERecord?id=CVE-2011-1071
nvd.nist.gov/vuln/detail/CVE-2011-1071
access.redhat.com/security/cve/CVE-2011-1089
cve.org/CVERecord?id=CVE-2011-1089
nvd.nist.gov/vuln/detail/CVE-2011-1089
access.redhat.com/security/cve/CVE-2011-1095
cve.org/CVERecord?id=CVE-2011-1095
nvd.nist.gov/vuln/detail/CVE-2011-1095
access.redhat.com/security/cve/CVE-2011-1659
cve.org/CVERecord?id=CVE-2011-1659
nvd.nist.gov/vuln/detail/CVE-2011-1659
access.redhat.com/security/cve/CVE-2011-4609
cve.org/CVERecord?id=CVE-2011-4609
nvd.nist.gov/vuln/detail/CVE-2011-4609
access.redhat.com/errata/RHSA-2012:0126
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0126.json