PT-2016-4015

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.23 Description The issue allows local users to bypass a pointer-guarding protection mechanism. This is achieved by setting the LD POINTER GUARD environment variable to a zero value, which is processed by the process...

Integer overflow

Integer overflow in the processenvvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LDHWCAPMASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution...