Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @

EGI CSIRT:Alerts/glibc-2011-04-12

From EGIWiki
Jump to navigation Jump to search
** WHITE information - Unlimited distribution allowed                       **
** see for distribution restrictions **


Title:       HIGH risk glibc vulnerability - privilege escalation (CVE-2011-0536) [EGI-ADV-20110412]
Date:        April 12, 2011
Last update: April 12, 2011

* Introduction

A flaw has been found in the dynamic linker component of the GNU C library. 
A local attacker could use this flaw to escalate their privileges via a setuid 
or setgid program which is dynamically linked to a library with certain properties.

This vulnerability affects both RH5 and RH6 and their variants.

EGI CSIRT considers this to be a HIGH vulnerability for now and might raise it 
to CRITICAL if a working exploit is made public


The fix for CVE-2010-3847 introduced a regression in the way the dynamic
loader expanded the $ORIGIN dynamic string token specified in the RPATH and
RUNPATH entries in the ELF library header. A local attacker could use this
flaw to escalate their privileges via a setuid or setgid program using
such a library. (CVE-2011-0536)

RH security team confirmed that reporter (of this vulnerability) indicated an 
intention to make exploit public after waiting some time to give users and 
downstream distros an opportunity to pick up the fix.


The only known mitigation is to apply the security patch from the software vendor.


It is STRONGLY recommanded to immediately apply vendor patches when they become available.  

Vendor patches are now available from

* Ubuntu
* Debian
* RHEL5/6
* SL5/6

To be released:

* CentOS5/6

RedHat bugzilla:

RHEL5 update:

RHEL6 update:

SL5/6 update:

SLC5 update:

SLC6 update:

Debian update:

Ubuntu update: