CVE-2019-19726
Published: 20191211
Description: OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_env in ld.so tries to strip LD_LIBRARY_PATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root.
References
CONFIRM:https://ift.tt/35hBMrmMISC:https://ift.tt/2tbHJIx
from Hacker News https://ift.tt/2PBA8KH
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.