VDB
DEBIAN-CVE-2010-3847
DEBIAN-CVE-2010-3847
PUBLISHED
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | glibc | 0, 0, 0 |
| Debian:11 | glibc | 0, 0, 0 |
| Debian:13 | glibc | 0, 0, 0 |
| Debian:12 | glibc | 0, 0, 0 |
Timeline
- Jan 7, 2011 CVE Published
- Apr 28, 2026 CVE Updated