glibc_mitigations.md
July 21, 2021 ยท View on GitHub
We list mitigations added in glibc.
| Version (and date) | Mitigation | References |
|---|---|---|
| glibc 2.5 | Introduce PTR_MANGLE to prevent atext() and setjmp() overwrites | 1 |
| glibc 2.18 | Harden against PTR_MANGLE bypass in static executables | 2 |
| glibc 2.22.90 | Harden against LD_POINTER_GUARD bypass in dynamically linked setuid binaries | 3 |
| glibc 2.24 | Place libio vtables in a static read-only range that can be checked before execution | 4 5 6 |
| glibc 2.32 | safe-linking for tcache and fastbin | 9 11 |
| glibc 2.34 | improvment for safe-linking for tcache | 7 8 10 12 |