Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7669
HistoryNov 01, 2018 - 6:55 a.m.

Privilege Escalation

2018-11-0106:55:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.0004 Low

EPSS

Percentile

5.1%

libhesiod.so is vulnerable to a privilege escalation. The library does not safely check the EUID with the UID parameters, overriding configuration values with environment variable. This can allow a malicious user to use the HESIOD_CONFIG or HES_DOMAIN environment variable to run arbitrary binaries.

CPENameOperatorVersion
libhesiod.soeq0.0.0