CVE-2020-1752

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2022/10/msg00021.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202101-20Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200511-0005/Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=25414Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c
• https://usn.ubuntu.com/4416-1/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.debian.org/debian-lts-announce/2022/10/msg00021.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202101-20Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200511-0005/Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=25414Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c
• https://usn.ubuntu.com/4416-1/Third Party Advisory

Published

Apr 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17514Apache Fineract prior to 1.5.0 disables HTTPS hostname verif…7.4
• CVE-2020-17515The "origin" parameter passed to some of the endpoints like …6.1
• CVE-2020-17516Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, …7.5
• CVE-2020-17517The S3 buckets and keys in a secure Apache Ozone Cluster mus…7.5
• CVE-2020-17518Apache Flink 1.5.1 introduced a REST handler that allows you…7.5
• CVE-2020-17519A change introduced in Apache Flink 1.11.0 (and released in …7.5
• CVE-2020-17520In the Pulsar manager 0.1.0 version, malicious users will be…6.5
• CVE-2020-17521Apache Groovy provides extension methods to aid with creatin…5.5
• CVE-2020-17522When ORT (now via atstccfg) generates ip_allow.config files …5.8
• CVE-2020-17523Apache Shiro before 1.7.1, when using Apache Shiro with Spri…9.8
• CVE-2020-17524Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17525Subversion's mod_authz_svn module will crash if the server i…7.5