elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Dec 17, 2017 |
| Centos_linux | — | Upgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-develUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-headers | Aug 28, 2019 | Dec 18, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 18, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Dec 17, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-devel | Jun 27, 2019 | Dec 18, 2017 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibcUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-common | Nov 6, 2018 | Dec 17, 2017 |
| Redhat_linux | — | Upgrade glibcUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade nscdUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-utilsNo solution exists | Oct 31, 2018 | Dec 17, 2017 |
| Suse | — | Upgrade glibc-devel-staticUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-extraUpgrade glibc-profileUpgrade glibc-develUpgrade glibc-32bitUpgrade glibc-infoUpgrade glibc-langUpgrade glibcUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-locale-base-32bitUpgrade glibc-htmlUpgrade glibc-profile-32bitUpgrade glibc-locale-32bitUpgrade nscdUpgrade glibc-utils | Jan 13, 2018 | Dec 17, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Dec 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub