high7.0Public exploit code
CVE-2017-1000409
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU C Library Dynamic Loader glibc ld.so - Memory Leak / Buffer Overflow2017-12-13 · local · linux · Verified
Impact
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Glibc | Version 2.5 |