elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Dec 17, 2017 |
| Centos_linux | — | Upgrade glibc-commonUpgrade glibc-headersUpgrade nscdUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibcUpgrade glibc-develUpgrade glibc-debuginfo-common | Aug 28, 2019 | Dec 18, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 18, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Dec 17, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-headersUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-devel | Jun 27, 2019 | Dec 18, 2017 |
| Oracle_linux | — | Upgrade glibc-utilsUpgrade glibcUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade nscdUpgrade glibc-headers | Nov 6, 2018 | Dec 17, 2017 |
| Redhat_linux | — | Upgrade glibc-develUpgrade glibc-utilsUpgrade glibc-commonNo solution existsUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-staticUpgrade nscdUpgrade glibc-debuginfoUpgrade glibc-headers | Oct 31, 2018 | Dec 17, 2017 |
| Suse | — | Upgrade glibc-utilsUpgrade glibc-locale-base-32bitUpgrade glibc-locale-baseUpgrade glibc-htmlUpgrade nscdUpgrade glibc-langUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade glibc-locale-32bitUpgrade glibc-profile-32bitUpgrade glibcUpgrade glibc-localeUpgrade glibc-devel-staticUpgrade glibc-profileUpgrade glibc-extraUpgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-32bit | Jan 13, 2018 | Dec 17, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Dec 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub