{"id":125200,"date":"2025-05-20T03:05:16","date_gmt":"2025-05-20T01:05:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen"},"modified":"2025-05-20T03:05:16","modified_gmt":"2025-05-20T01:05:16","slug":"uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-glibc-zatragivayushhaya-staticheski-sobrannye-suid-fajly-s-dlopen","title":{"rendered":"Hiba a Glibc-ben, amely statikusan \u00f6ssze\u00e1ll\u00edtott suid f\u00e1jlokat \u00e9rint a dlopen-nel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A Glibc standard C library vulnerability (CVE-2025-4802) has been identified, allowing code execution with the privileges of another user assigned during the launch of applications with the suid flag. The danger of the problem is negated by the conditions under which it manifests \u2014 Glibc developers were unable to find a single suid program to which the identified vulnerability could be applied. However, it is not excluded that custom suid programs satisfying the conditions for carrying out the attack may be in use. <\/p>\n
Exploitation of the vulnerability is possible only for statically compiled suid programs that call the dlopen function. In addition to programs that directly invoke dlopen, the vulnerability also affects programs in which the dlopen function is executed indirectly as a result of calling setlocale or NSS functions like getaddrinfo. <\/p>\n
The problem arises from the handling of the LD_LIBRARY_PATH environment variable in the context of suid applications when dlopen is called from statically compiled programs (the LD_LIBRARY_PATH was ignored only in dynamic linking). By setting a path in LD_LIBRARY_PATH, an attacker can arrange for a malicious library to be loaded from their directory. The vulnerability manifests starting from Glibc version 2.27 (February 2018) and was fixed in Glibc version 2.39 (February 2024). \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"