vulnerability

Huawei EulerOS: CVE-2015-8777: glibc security update

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Jan 20, 2016
Added
Nov 30, 2017
Modified
Apr 14, 2025

Description

It was found that the dynamic loader did not sanitize the LD_POINTER_GUARD environment variable. An attacker could use this flaw to bypass the pointer guarding protection on set-user-ID or set-group-ID programs to execute arbitrary code with the permissions of the user running the application.

Solutions

huawei-euleros-2_0_sp2-upgrade-glibchuawei-euleros-2_0_sp2-upgrade-glibc-commonhuawei-euleros-2_0_sp2-upgrade-glibc-develhuawei-euleros-2_0_sp2-upgrade-glibc-headershuawei-euleros-2_0_sp2-upgrade-glibc-statichuawei-euleros-2_0_sp2-upgrade-glibc-utilshuawei-euleros-2_0_sp2-upgrade-nscd
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.