[prev in list] [next in list] [prev in thread] [next in thread]
List: oss-security
Subject: Re: [oss-security] CVE Request: Glibc Pointer guarding weakness
From: akuster <akuster () mvista ! com>
Date: 2015-10-30 0:45:21
Message-ID: 5632BDA1.2060706 () mvista ! com
[Download RAW message or body]
On 10/15/2015 01:08 AM, Florian Weimer wrote:
> On 09/05/2015 06:49 PM, Hector Marco-Gisbert wrote:
>> Hello,
>>
>> A weakness in the dynamic loader have been found, Glibc prior to 2.22.90
>> are affected. The issue is that the LD_POINTER_GUARD in the environment
>> is not sanitized allowing local attackers easily to bypass the pointer
>> guarding protection on set-user-ID and set-group-ID programs.
>>
>>
>> Details and PoC at:
>> http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html
>>
>>
>> A patch is already sent to Glibc maintainers. This issue is similar to
>> http://hmarco.org/bugs/CVE-2013-4788.html but now affect to dynamic
>> linked applications.
>
>> Could you please assign a CVE ?
Did I miss the assignment or this does not warrant a CVE?
- armin
>
> Upstream commit:
>
> https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commit;h=a014cecd82b71b70a6a843e250e06b541ad524f7
>
> Florian
>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic