{"id":125200,"date":"2025-05-20T03:05:16","date_gmt":"2025-05-20T01:05:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen"},"modified":"2025-05-20T03:05:16","modified_gmt":"2025-05-20T01:05:16","slug":"uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","title":{"rendered":"Vulnerability in Glibc affecting statically linked suid files with dlopen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability (CVE-2025-4802) has been discovered in the standard C library Glibc, which allows for code execution with the privileges of another user when applications are launched with the suid flag. The risks are mitigated by the conditions under which the issue manifests \u2014 Glibc developers have not been able to find a single suid program to which the discovered vulnerability applies. However, it is not ruled out that custom suid programs satisfying the conditions for an attack may be in use. <\/p>\n
Exploitation of the vulnerability is only possible for statically compiled suid programs that call the dlopen function. In addition to programs that directly call dlopen, the vulnerability also affects programs in which the dlopen function is invoked indirectly, as a result of calling setlocale or NSS functions, such as getaddrinfo. <\/p>\n
The issue is caused by the handling of the LD_LIBRARY_PATH environment variable in the context of suid applications when calling dlopen from statically compiled programs (the LD_LIBRARY_PATH was ignored only with dynamic linking). By setting a path in LD_LIBRARY_PATH, an attacker can orchestrate the loading of a malicious library from their directory. The vulnerability manifests starting from Glibc version 2.27 (February 2018) and was addressed in the release of Glibc 2.39 (February 2024). \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"