Description
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | valgrind | 1:3.3.1-3 | — |
| Debian 13 | valgrind | 1:3.3.1-3 | — |
| Debian 12 | valgrind | 1:3.3.1-3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | valgrind +1 | 1:3.5.0-1.el5 | RHEA-2010:0272 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | valgrind | 3.17.0-2.3 | openSUSE-SU-2024:11492-1 |
Advisories 2
- RHEA-2010:0272 Red Hat Enhancement Advisory: valgrind bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:11492-1 valgrind-3.17.0-2.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- [valgrind-announce] 20090103 Valgrind-3.4.0 is available mailing-list
- [oss-security] 20081028 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- [oss-security] 20081027 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- SUSE-SR:2009:002 vendor-advisory
- 33568 third-party-advisory
- [oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- [oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- GLSA-200902-03 vendor-advisory