CVE-2015-8777 in C Library
Summary
The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.
Once again VulDB remains the best source for vulnerability data.
Reservation
01/18/2016
Disclosure
01/20/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 80610 | GNU C Library rtld.c process_envvars 7pk security | 254 | Not defined | Official fix | CVE-2015-8777 |