Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xmc2-qrxf-m6gc

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

EPSS

Процентиль: 35%
0.00143
Низкий

Связанные уязвимости

ubuntu
около 15 лет назад

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

nvd
около 15 лет назад

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

debian
около 15 лет назад

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory nam ...

EPSS

Процентиль: 35%
0.00143
Низкий