https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:53:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-09685 bdu:2015-09685 https://cve.radiocsirt.org/vuln/bdu:2015-09685 https://cve.radiocsirt.org/vuln/certa-2011-avi-571 certa-2011-avi-571 https://cve.radiocsirt.org/vuln/certa-2011-avi-571 https://cve.radiocsirt.org/vuln/euvd-2026-114906 EUVD-2026-114906 https://cve.radiocsirt.org/vuln/euvd-2026-114906 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1658 <p>ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.</p> <p>ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1658 https://cve.radiocsirt.org/vuln/ghsa-47f6-pj9c-f35v <p>ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.</p> <p>ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.</p> https://cve.radiocsirt.org/vuln/ghsa-47f6-pj9c-f35v https://cve.radiocsirt.org/vuln/gsd-2011-1658 gsd-2011-1658 https://cve.radiocsirt.org/vuln/gsd-2011-1658 https://cve.radiocsirt.org/vuln/rhsa-2011:0412 <p>glibc: Improper encoding of names with certain special character in utilities for writing to mtab table glibc: fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH glibc: fnmatch() alloca()-based memory corruption flaw glibc: insufficient quoting in the locale command output glibc: ld.so insecure handling of privileged programs&#39; RPATHs with $ORIGIN glibc: fnmatch() alloca()-based memory corruption flaw</p> <p>glibc: Improper encoding of names with certain special character in utilities for writing to mtab table glibc: fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH glibc: fnmatch() alloca()-based memory corruption flaw glibc: insufficient quoting in the locale command output glibc: ld.so insecure handling of privileged programs&#39; RPATHs with $ORIGIN glibc: fnmatch() alloca()-based memory corruption flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0412