LWN.net Logo

glibc: code execution

Package(s):glibc CVE #(s):CVE-2009-5064
Created:December 7, 2011 Updated:December 7, 2011
Description: From the Red Hat advisory: A flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd.
Alerts:
Scientific Linux SL-glib-20111206 2011-12-06
Red Hat RHSA-2011:1526-03 2011-12-06
Red Hat RHSA-2012:0126-01 2012-02-13
Red Hat RHSA-2012:0125-01 2012-02-13
CentOS CESA-2012:0125 2012-02-14
CentOS CESA-2012:0126 2012-02-14
Oracle ELSA-2012-0125 2012-02-14
Oracle ELSA-2012-0126 2012-02-14
Scientific Linux SL-glib-20120214 2012-02-14
Scientific Linux SL-glib-20120214 2012-02-14

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds