https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:21:24.300549+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05945 bdu:2022-05945 2026-10-03T22:21:24.442868+00:00 bdu:2022-05945 https://cve.radiocsirt.org/vuln/cnvd-2018-00646 cnvd-2018-00646 2026-10-03T22:21:24.442907+00:00 cnvd-2018-00646 https://cve.radiocsirt.org/vuln/euvd-2026-79324 EUVD-2026-79324 2026-10-03T22:21:24.442922+00:00 EUVD-2026-79324 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16997 fkie_cve-2017-16997 2026-10-03T22:21:24.442934+00:00

elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.

 https://cve.radiocsirt.org/vuln/ghsa-q5m3-4jcg-c4rf GHSA-q5m3-4jcg-c4rf 2026-10-03T22:21:24.442967+00:00

elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.

 https://cve.radiocsirt.org/vuln/gsd-2017-16997 gsd-2017-16997 2026-10-03T22:21:24.442986+00:00 gsd-2017-16997 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10792-1 openSUSE-SU-2024:10792-1 — glibc-2.34-1.2 on GA media 2026-10-03T22:21:24.442997+00:00

glibc-2.34-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:0074-1 SUSE-SU-2018:0074-1 — Security update for glibc 2026-10-03T22:21:24.443037+00:00

Security update for glibc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16997 UBUNTU-CVE-2017-16997 2026-10-03T22:21:24.443056+00:00

Affected: Ubuntu:14.04:LTS: eglibc, Ubuntu:16.04:LTS: glibc

elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the "./" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1478 WID-SEC-W-2022-1478 — GNU libc: Mehrere Schwachstellen 2026-10-03T22:21:24.443088+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes oder mit administrative Privilegien auszuführen oder einen Denial of Service Angriff durchzuführen.