[Bug dynamic-link/25204] New: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

["koriakin at 0x04 dot net" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=25204

            Bug ID: 25204
           Summary: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid
                    binaries
           Product: glibc
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: dynamic-link
          Assignee: unassigned at sourceware dot org
          Reporter: koriakin at 0x04 dot net
  Target Milestone: ---

The code using LD_PREFER_MAP_32BIT_EXEC is run before the code that removes
security-sensitive variables from the environment, thus the latter is
ineffective.  This means a local attacker can effectively weaken ASLR strength
on setuid binaries.

-- 
You are receiving this mail because:
You are on the CC list for the bug.