Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 29 Oct 2015 17:45:21 -0700
From: akuster <>
Cc:, Florian Weimer <>
Subject: Re: CVE Request: Glibc Pointer guarding weakness

On 10/15/2015 01:08 AM, Florian Weimer wrote:
> On 09/05/2015 06:49 PM, Hector Marco-Gisbert wrote:
>> Hello,
>> A weakness in the dynamic loader have been found, Glibc prior to 2.22.90
>> are affected. The issue is that the LD_POINTER_GUARD in the environment
>> is not sanitized allowing local attackers easily to bypass the pointer
>> guarding protection on set-user-ID and set-group-ID programs.
>> Details and PoC at:
>> A patch is already sent to Glibc maintainers. This issue is similar to
>> but now affect to dynamic
>> linked applications.
>> Could you please assign a CVE ?

Did I miss the assignment or this does not warrant a CVE?

- armin
> Upstream commit:
> Florian

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ