7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
0.4%
CentOS Errata and Security Advisory CESA-2010:0793
The glibc packages contain the standard C libraries used by multiple
programs on the system. These packages contain the standard C and the
standard math libraries. Without these two libraries, a Linux system cannot
function properly.
It was discovered that the glibc dynamic linker/loader did not perform
sufficient safety checks when loading dynamic shared objects (DSOs) to
provide callbacks for its auditing API during the execution of
privileged programs. A local attacker could use this flaw to escalate
their privileges via a carefully-chosen system DSO library containing
unsafe constructors. (CVE-2010-3856)
Red Hat would like to thank Ben Hawkes and Tavis Ormandy for reporting this
issue.
All users should upgrade to these updated packages, which contain a
backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2010-October/079285.html
https://lists.centos.org/pipermail/centos-announce/2010-October/079286.html
Affected packages:
glibc
glibc-common
glibc-devel
glibc-headers
glibc-utils
nscd
Upstream details at:
https://access.redhat.com/errata/RHSA-2010:0793
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i386 | glibc | < 2.5-49.el5_5.7 | glibc-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i686 | glibc | < 2.5-49.el5_5.7 | glibc-2.5-49.el5_5.7.i686.rpm |
CentOS | 5 | i386 | glibc-common | < 2.5-49.el5_5.7 | glibc-common-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i386 | glibc-devel | < 2.5-49.el5_5.7 | glibc-devel-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i386 | glibc-headers | < 2.5-49.el5_5.7 | glibc-headers-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i386 | glibc-utils | < 2.5-49.el5_5.7 | glibc-utils-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i386 | nscd | < 2.5-49.el5_5.7 | nscd-2.5-49.el5_5.7.i386.rpm |
CentOS | 5 | i686 | glibc | < 2.5-49.el5_5.7 | glibc-2.5-49.el5_5.7.i686.rpm |
CentOS | 5 | x86_64 | glibc | < 2.5-49.el5_5.7 | glibc-2.5-49.el5_5.7.x86_64.rpm |
CentOS | 5 | x86_64 | glibc-common | < 2.5-49.el5_5.7 | glibc-common-2.5-49.el5_5.7.x86_64.rpm |