{"id":"CVE-2010-3847","aliases":["DEBIAN-CVE-2010-3847","DSA-2122-1","DSA-2122-2","EUVD-2010-3826","GHSA-q3fw-v7x4-w8hh","RHSA-2010:0787","RHSA-2010:0872"],"status":"published","title":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x...","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.10339,"percentile":0.95742,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-59"],"published":"2010-10-22T00:00:00Z","modified":"2026-10-23T17:47:43Z","exploits":[{"source":"exploitdb","id":"EDB-15274","title":"GNU C library dynamic linker - '$ORIGIN' Expansion","type":"local","platform":"linux","date":"2010-10-18","verified":true,"url":"https://www.exploit-db.com/exploits/15274"},{"source":"metasploit","id":"exploit/linux/local/glibc_ld_audit_dso_load_priv_esc","title":"glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation","type":"exploit","platform":"Linux","date":"2010-10-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/glibc_ld_audit_dso_load_priv_esc"},{"source":"metasploit","id":"exploit/linux/local/glibc_origin_expansion_priv_esc","title":"glibc '$ORIGIN' Expansion Privilege Escalation","type":"exploit","platform":"Linux","date":"2010-10-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/glibc_origin_expansion_priv_esc"},{"source":"exploitdb","id":"EDB-15304","title":"GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation","type":"local","platform":"linux","date":"2010-10-22","verified":true,"url":"https://www.exploit-db.com/exploits/15304"},{"source":"pocgithub","id":"magisterquis/cve-2010-3847","title":"magisterquis/cve-2010-3847","date":"2017-01-02","url":"https://github.com/magisterquis/cve-2010-3847"},{"source":"exploitdb","id":"EDB-44024","title":"glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)","type":"local","platform":"linux","date":"2018-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/44024"},{"source":"exploitdb","id":"EDB-44025","title":"glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)","type":"local","platform":"linux","date":"2018-02-12","verified":true,"url":"https://www.exploit-db.com/exploits/44025"}],"fixes":[{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.11.2-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.11.2-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.11.2-8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","fixed_in":["0:2.5-49.el5_5.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-8"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-18lenny6"}]}],"versions":["2.7-18","2.7-18lenny1","2.7-18lenny2","2.7-18lenny4"],"bundled":2},{"source":"osv","ecosystem":"Debian:5.0","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-18lenny7"}]}],"versions":["2.7-18","2.7-18lenny1","2.7-18lenny2","2.7-18lenny4","2.7-18lenny6"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5-49.el5_5.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"glibc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"nscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12-1.7.el6_0.3"}]}],"bundled":2}],"products":[{"vendor":"gnu","product":"glibc"}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201011-01.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0001.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100120941","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2010/Oct/257","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","evidence"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0872.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:207","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://www.exploit-db.com/exploits/44025/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"https://www.exploit-db.com/exploits/44024/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"http://www.debian.org/security/2010/dsa-2122","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1009-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643306","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","report"]},{"url":"http://www.securityfocus.com/archive/1/515545/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0787.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/44154","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2010/Oct/294","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://secunia.com/advisories/42787","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0025","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://sourceware.org/ml/libc-hacker/2010-10/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://seclists.org/fulldisclosure/2010/Oct/292","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://www.kb.cert.org/vuls/id/537223","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3847","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0787","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0872","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3847","tags":["report"]},{"url":"https://www.exploit-db.com/exploits/44024"},{"url":"https://www.exploit-db.com/exploits/44025"},{"url":"https://github.com/advisories/GHSA-q3fw-v7x4-w8hh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-3847","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0787.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3847","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=645672","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0872.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3856","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-3847","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2011-01-07T18:00:00Z","modified":"2024-08-07T03:26:12.244Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3826","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2011-01-07T18:00:00Z","modified":"2024-08-07T03:26:12Z","updated_at":"2026-11-03T01:39:32.539513Z"}],"ghsa":[{"id":"GHSA-q3fw-v7x4-w8hh","title":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x...","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2022-05-14T02:42:52Z","modified":"2025-04-11T03:43:48Z","cwes":["CWE-59"],"updated_at":"2026-11-02T15:01:07.282751Z"}],"nvd":[{"id":"CVE-2010-3847","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2011-01-07T19:00:17.78Z","modified":"2026-06-16T23:23:39.917Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:03.297831Z"}],"osv":[{"id":"CVE-2010-3847","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2011-01-07T19:00:17Z","modified":"2026-04-10T03:41:27.400569Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DEBIAN-CVE-2010-3847","description":"elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.","status":"published","published":"2011-01-07T19:00:17.78Z","modified":"2026-10-23T17:47:43.741546678Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"DSA-2122-1","title":"glibc - local privilege escalation","status":"published","published":"2010-10-22T00:00:00Z","modified":"2026-03-09T01:20:42.20604Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"DSA-2122-2","title":"glibc - privilege escalation","status":"published","published":"2011-01-11T00:00:00Z","modified":"2026-03-09T01:21:17.733097Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0787","title":"Red Hat Security Advisory: glibc security update","status":"published","published":"2024-09-15T18:44:42Z","modified":"2026-06-26T10:14:25Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2010:0872","title":"Red Hat Security Advisory: glibc security and bug fix update","status":"published","published":"2024-09-15T18:44:51Z","modified":"2026-06-26T12:18:53.338285494Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}