Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

glibc: integer overflow

Package(s):

glibc

CVE #(s):

CVE-2007-3508

Created:

July 4, 2007

Updated:

July 4, 2007

Description:

The GNU C library (prior to version 2.5-r4) suffers from an integer overflow vulnerability in the dynamic linker which could, maybe, be exploited to run code with root privileges.

Alerts:

Gentoo

200707-04

2007-07-03

(Log in to post comments)

glibc: integer overflow

Posted Jul 5, 2007 15:22 UTC (Thu) by smithj (subscriber, #38034) [Link]

As mentioned on https://issues.rpath.com/browse/RPL-1514, rPath does not consider this a vulnerability, and thus will not release an update.