Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XFree86 libX11.so本地权限提升漏洞
Vulnerability Description
XFree86软件包包含多个程序和X SERVER运行所需的库，包括libX11.so库。 XFree86软件包中的libX11.so库在装载其他库时路径处理不够正确，本地攻击者可以利用这个漏洞进行权限提升攻击。 libX11.so库在动态装载其他库时其路径名环境变量可由执行用户控制，而且与libX11.so库连接的setuid程序在装载其他库的时候也执行相同的操作，这种行为可允许本地用户通过装载恶意库以不同的UID执行任意代码，造成权限提升。 <*链接：http://www.suse.com/de/su
CVSS Information
N/A
Vulnerability Type
N/A