Rapid7

vulnerability

Red Hat: CVE-2015-8777: Moderate: glibc security, bug fix, and enhancement update (RHSA-2017:1916)

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Jan 20, 2016
Added
Aug 3, 2017
Modified
Feb 19, 2026

Description

The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.

Solutions

redhat-upgrade-glibcredhat-upgrade-glibc-commonredhat-upgrade-glibc-debuginforedhat-upgrade-glibc-debuginfo-commonredhat-upgrade-glibc-develredhat-upgrade-glibc-headersredhat-upgrade-glibc-staticredhat-upgrade-glibc-utilsredhat-upgrade-nscd

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.