vulnerability

Amazon Linux AMI: CVE-2015-8777: Security patch for glibc (ALAS-2017-877)

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Jan 20, 2016
Added
Sep 1, 2017
Modified
Oct 14, 2022

Description

The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.

Solution

amazon-linux-upgrade-glibc

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

    Try it today