CVE-2021-34398

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of...

CVE-2021-34398

CVE-2021-34398 affects NVIDIA DCGM (all versions before 2.2.9) with a vulnerability in the DIAG module that allows a user to inject shared libraries into the DCGM server, which typically runs with root privileges. This can lead to privilege escalation, complete loss of confidentiality and integri...

IBM DB2 - Shared Library Injection

source: https://www.securityfocus.com/bid/8346/info IBM DB2 ships with a number of shared libraries, stored in a directory owned by the user and group 'bin'. As setuid root utilities are linked to these libraries, their ownership by a user and group of a lower privilege level constitutes a...