Every CVE Search/ Get API key

CVE-2007-3508

** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2...

7.2 HighFix availableDisputed

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Exploit likelihood

0.45%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Record
CVE-2007-3508
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Record
CVE-2007-3508
Updated
2026-11-02
EUVDEUVD-2007-3492 No score

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Record
EUVD-2007-3492
Updated
2026-11-03
GitHub AdvisoriesGHSA-r68c-v3gr-w2rh No score

** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2...

** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution.

Record
GHSA-r68c-v3gr-w2rh
Updated
2026-11-02
OSVBELL-CVE-2007-3508 7.2

CVE-2007-3508 does not affect BellSoft software

Record
BELL-CVE-2007-3508
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
OSV No score

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Record
CVE-2007-3508
Updated
2026-11-02
OSVDEBIAN-CVE-2007-3508 No score

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Record
DEBIAN-CVE-2007-3508
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glibc
Debian:12
 before 2.6-2
2.6-2
glibc
Debian:13
 before 2.6-2
2.6-2
glibc
Debian:14
 before 2.6-2
2.6-2

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3508 is a high vulnerability (CVSS 7.2) in Gentoo Glibc, published July 3, 2007. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in glibc 2.6-2.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open