elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | Dec 7, 2018 | Dec 17, 2017 |
| Centos_linux | — | Upgrade nscdUpgrade glibc-utilsUpgrade glibc-debuginfoUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc | Aug 28, 2019 | Dec 18, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 18, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Apr 5, 2018 | Dec 17, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-headersUpgrade glibc-staticUpgrade glibcUpgrade nscd | Jun 27, 2019 | Dec 18, 2017 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibcUpgrade glibc-common | Nov 6, 2018 | Dec 17, 2017 |
| Redhat_linux | — | Upgrade glibc-headersUpgrade glibc-debuginfoUpgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-develNo solution existsUpgrade glibc-debuginfo-commonUpgrade glibc-commonUpgrade glibc-utils | Oct 31, 2018 | Dec 17, 2017 |
| Suse | — | Upgrade glibc-langUpgrade glibc-locale-baseUpgrade glibc-locale-32bitUpgrade glibc-htmlUpgrade glibc-profile-32bitUpgrade glibcUpgrade nscdUpgrade glibc-locale-base-32bitUpgrade glibc-infoUpgrade glibc-utilsUpgrade glibc-devel-32bitUpgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-localeUpgrade glibc-devel-staticUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-i18ndata | Jan 13, 2018 | Dec 17, 2017 |
| Ubuntu | — | Upgrade libc6 | Jan 18, 2018 | Dec 17, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub