Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Glibc SUID/SGID LD_PRELOAD文件覆盖漏洞
Vulnerability Description
Glibc在使用SUID或SGID程序的LD_PRELOAD环境变量时,不确认/etc/ld.so.cache和SUID/SGID的预装载库,本地用户可以利用该漏洞通过从/lib或/usr/lib加载库覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A