Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
valgrind valgrindrc文件不可信搜索路径漏洞
Vulnerability Description
Valgrind是一个构建程序动态分析工具的框架，通过Valgrind工具，可以实现自动检测内存管理和线程错误，并配置了详细的计划。也可以使用Valgrind的建设新的工具。 valgrind 3.4.0之前的版本存在不可信的搜索路径漏洞。本地用户可以通过木马程序并执行任意代码。在当前工作目录valgrindrc文件，可以证明如利用的演示恶意的数据库命令选项。
CVSS Information
N/A
Vulnerability Type
N/A