CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Untrusted Search Path
Summary: elf/dl-load.c in the gnu c library (aka glibc or libc6) 2.19 through 2.26 mishandles rpath and runpath containing $origin for a privileged (setuid or at_secure) program, which allows local users to gain privileges via a trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. this is associated with misinterpretion of an empty rpath/runpath token as the "./" directory. note: this configuration of rpath/runpath for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common linux distribution.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-12-18
Last Modified Date: 2019-04-26