CVE-2010-3856
NoneCVSS
—
EPSS
11.2%
Published
Jan 7, 2011
CISA due date
—
The record
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | glibc | 0 | 2.11.2-8 |
| Debian:12 | glibc | 0 | 2.11.2-8 |
| Debian:13 | glibc | 0 | 2.11.2-8 |
| Debian:5.0 | glibc | 0 | 2.7-18lenny6 |
| Debian:5.0 | glibc | 0 | 2.7-18lenny7 |
| Red Hat:enterprise_linux:5::client | glibc | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-common | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-debuginfo | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-debuginfo-common | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-devel | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-headers | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | glibc-utils | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::client | nscd | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-common | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-debuginfo | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-debuginfo-common | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-devel | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-headers | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | glibc-utils | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:5::server | nscd | 0 | 0:2.5-49.el5_5.7 |
| Red Hat:enterprise_linux:6::client | glibc | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-common | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-devel | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-headers | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-static | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | glibc-utils | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::client | nscd | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-common | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-devel | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-headers | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-static | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | glibc-utils | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::computenode | nscd | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-common | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-devel | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-headers | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-static | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | glibc-utils | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::server | nscd | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-common | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-debuginfo | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-devel | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-headers | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-static | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | glibc-utils | 0 | 0:2.12-1.7.el6_0.3 |
| Red Hat:enterprise_linux:6::workstation | nscd | 0 | 0:2.12-1.7.el6_0.3 |
Related vulnerabilities
- CVE-2021-3326 The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when… Also affects glibc
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… Also affects glibc
- CVE-2017-12133 Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc
- CVE-2015-5180 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of… Also affects glibc
- CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to… Also affects glibc
- CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly… Also affects glibc
- CVE-2016-10228 The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when… Also affects glibc
- CVE-2016-4429 Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc