PT-2010-5674 · Gnu+1 · Glibc+1

Tavis Ormandy · Published 1970-01-01 · Updated 2023-02-13 · CVE-2010-3847

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.11.2-r3 glibc versions prior to 2.15-r3 glibc-dceext-32bit (affected versions not specified) glibc-64bit (affected versions not specified) glibc-profile-64bit (affected versions not specified) glibc-obsolete (affected versions not specified) glibc-locale-64bit (affected versions not specified) glibc-dceext (affected versions not specified) glibc-debuginfo (affected versions not specified) glibc-devel-64bit (affected versions not specified)

Description The issue involves multiple vulnerabilities in the glibc package, which can lead to breaches of confidentiality, integrity, and availability of protected information. Exploitation of these vulnerabilities can be carried out locally or remotely, depending on the specific vulnerability and system configuration. The vulnerabilities can be exploited by crafted dynamic shared objects or through other means, allowing attackers to gain privileges or disrupt system operations.

Recommendations For glibc versions prior to 2.11.2-r3, update to version 2.11.2-r3 or later. For glibc versions prior to 2.15-r3, update to version 2.15-r3 or later. For glibc-dceext-32bit, glibc-64bit, glibc-profile-64bit, glibc-obsolete, glibc-locale-64bit, glibc-dceext, glibc-debuginfo, and glibc-devel-64bit, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-189

CWE-59

Related Identifiers

BDU:2015-04440

BDU:2015-04441

BDU:2015-04442

BDU:2015-04443

BDU:2015-04444

BDU:2015-04445

BDU:2015-04446

BDU:2015-04447

BDU:2015-09412

BDU:2015-09685

CVE-2010-3847

DSA-2122-1

DSA-2122-2

RHSA-2010:0787

RHSA-2010:0872

RHSA-2010_0787

RHSA-2010_0872

Affected Products

Red Hat

Glibc

References · 42

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_ld_audit_dso_load_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_origin_expansion_priv_esc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/15304 · Exploit
• 🔥 https://exploit-db.com/exploits/44025 · Exploit
• 🔥 https://exploit-db.com/exploits/44024 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2010/Oct/257 · Exploit
• 🔥 https://exploit-db.com/exploits/15274 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3847 · Security Note
• http://vupen.com/english/advisories/2011/0025 · Vendor Advisory
• http://secunia.com/advisories/42787 · Vendor Advisory
• https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2010-0872.html · Vendor Advisory
• http://debian.org/security/2010/dsa-2122 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04440 · Security Note
• https://bdu.fstec.ru/vul/2015-09685 · Security Note