CVEvulnerability
CVE-2025-4802
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-05-16
- Last modified
- 2026-06-17
- Assigner
- 3ff69d7a-14f2-4f67-a097-88dee7810d18
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-426
Description
Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).
Affected configurations
• gnu glibc (>= 2.27 <= 2.38)
Related
Weakness · CWE (1)
- CWE-426 Untrusted Search Path weakness
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=32976 Issue Tracking
- https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e Patch
- http://www.openwall.com/lists/oss-security/2025/05/16/7 Mailing List
- http://www.openwall.com/lists/oss-security/2025/05/17/2 Exploit, Mailing List
- https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html lists.debian.org