elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Dec 17, 2017 |
| Centos_linux | — | Upgrade glibcUpgrade glibc-debuginfo-commonUpgrade glibc-develUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-headersUpgrade nscdUpgrade glibc-utils | Aug 28, 2019 | Dec 18, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 18, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Dec 17, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-commonUpgrade nscdUpgrade glibc-staticUpgrade glibcUpgrade glibc-headers | Jun 27, 2019 | Dec 18, 2017 |
| Oracle_linux | — | Upgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-utils | Nov 6, 2018 | Dec 17, 2017 |
| Redhat_linux | — | Upgrade glibc-staticUpgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-debuginfoNo solution existsUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-utilsUpgrade glibc-common | Oct 31, 2018 | Dec 17, 2017 |
| Suse | — | Upgrade glibc-profileUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-32bitUpgrade glibc-extraUpgrade glibc-devel-staticUpgrade glibc-develUpgrade nscdUpgrade glibc-profile-32bitUpgrade glibc-langUpgrade glibc-devel-32bitUpgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibcUpgrade glibc-locale-base-32bitUpgrade glibc-htmlUpgrade glibc-infoUpgrade glibc-utils | Jan 13, 2018 | Dec 17, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Dec 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub