Summary
It was discovered that the GNU C library did not properly handle memory
when processing environment variables for setuid programs. A local attacker
could use this in combination with another vulnerability to gain
administrative privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | eglibc | 2.19-0ubuntu6.13 |
| Ubuntu · 16.04 LTS 16.04:LTS | glibc | 2.23-0ubuntu9 |
Vulnerabilities 1
-
Unscored —CVE-2017-1000366 Public exploit
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causi…
References
-
report
https://ubuntu.com/security/CVE-2017-1000366