CVE-2020-10029: Medium severity GNU glibc vulnerability
Last updated 18 August 2025
Other sources
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/erempio2l.c.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-10029?
CVE-2020-10029 is a vulnerability in the GNU C Library (glibc) that could cause a denial of service by overflowing an on-stack buffer.
What is the severity of CVE-2020-10029?
The severity of CVE-2020-10029 is medium, with a severity value of 5.5.
Which software versions are affected by CVE-2020-10029?
The affected software versions are glibc 2.27-3ubuntu1.2, glibc 2.30, glibc 2.23-0ubuntu11.2, and various versions of glibc from Debian and IBM Cloud Pak for Security.
How can CVE-2020-10029 be fixed?
To fix CVE-2020-10029, upgrade to the recommended versions of glibc provided by the respective vendors or distribution maintainers.
Where can I find more information about CVE-2020-10029?
You can find more information about CVE-2020-10029 on the CVE Mitre website, Ubuntu Security Notices, and NIST National Vulnerability Database.