Security

5005 readers

1 users here now

Confidentiality Integrity Availability

founded 4 years ago

MODERATORS

[email protected]

Root access vulnerability in glibc library impacts many Linux distros (securityaffairs.com)

submitted 9 months ago by [email protected] to c/[email protected]

3 comments fedilink hide all child comments

top 3 comments

sorted by: hot top controversial new old

[–] [email protected] 4 points 9 months ago (2 children)

@BlanK0 @security the fix commit says the problem occurs when the program name is very long - so probably not very exploitable, as the program name is usually set in stone.

[–] [email protected] 3 points 9 months ago

Thx for pointing that out 🤙

[–] [email protected] 2 points 9 months ago* (last edited 9 months ago)

Symlink or copy/rename could trigger it, as long as there is a user writable area with execute perms? /home usually allows exec?

Also some of the exec* functions allow manipulating the argv[0], so possibly another vector there.