https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:15:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05945 bdu:2022-05945 https://cve.radiocsirt.org/vuln/bdu:2022-05945 https://cve.radiocsirt.org/vuln/cnvd-2018-00646 cnvd-2018-00646 https://cve.radiocsirt.org/vuln/cnvd-2018-00646 https://cve.radiocsirt.org/vuln/euvd-2026-79324 EUVD-2026-79324 https://cve.radiocsirt.org/vuln/euvd-2026-79324 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16997 <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16997 https://cve.radiocsirt.org/vuln/ghsa-q5m3-4jcg-c4rf <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> https://cve.radiocsirt.org/vuln/ghsa-q5m3-4jcg-c4rf https://cve.radiocsirt.org/vuln/gsd-2017-16997 gsd-2017-16997 https://cve.radiocsirt.org/vuln/gsd-2017-16997 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10792-1 <p>glibc-2.34-1.2 on GA media</p> <p>glibc-2.34-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10792-1 https://cve.radiocsirt.org/vuln/suse-su-2018:0074-1 <p>Security update for glibc</p> <p>Security update for glibc</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0074-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16997 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: eglibc, Ubuntu:16.04:LTS: glibc</p> <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: eglibc, Ubuntu:16.04:LTS: glibc</p> <p>elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the &#34;./&#34; directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-16997 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1478 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes oder mit administrative Privilegien auszuführen oder einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes oder mit administrative Privilegien auszuführen oder einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1478