6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
roarify in roaraudio 0.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
bugs.debian.org/cgi-bin/bugreport.cgi?bug=598295