Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N R U L L N 5.4 .0307 87.4 —
AFFECTED Product Versions Fixed glibc current (At least as of 2018-02-16) – —
TIMELINE Mar 20 Reserved by dwf Jul 15 Published (CNA: dwf) Oct 14 EXPLOIT PUBLISHED — CVE-2019-1010023 (GNU Libc glibc). Public exploit reference added.
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
| Date | Event | Detail |
|---|---|---|
| March 20, 2019 | Reserved | Reserved by dwf |
| July 15, 2019 | Published | Published (CNA: dwf) |
| October 14, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2019-1010023 (GNU Libc glibc). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| GNU Libc | glibc | — | current (At least as of 2018-02-16) | — |
Authoritative record: CVE-2019-1010023 at cve.org
Vendors: gnu libc
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2019-1010023 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
