• sun_is_ra
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    a local attacker could exploit the shortcoming to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.