PT-2017-3532 · Gnu+2 · Glibc+2
Published
2017-12-11
·
Updated
2025-12-23
·
CVE-2017-1000408
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
glibc version 2.1.1
Description:
The issue is related to a memory leak in glibc that can be triggered and amplified through the
LD HWCAP MASK environment variable. It is associated with errors in resource management in the dynamic loader ld.so of the glibc library, which provides system calls and basic functions. Exploitation of this issue may allow a local attacker to cause a memory leak using the LD HWCAP MASK variable.Recommendations:
For glibc version 2.1.1, as a temporary workaround, consider restricting the use of the
LD HWCAP MASK environment variable to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Missing Release of Resource after Effective Lifetime
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Suse
Ubuntu
Glibc