[Bug dynamic-link/18928] New: LD_POINTER_GUARD is not ignored for privileged binaries

[ppluzhnikov at google dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=18928

            Bug ID: 18928
           Summary: LD_POINTER_GUARD is not ignored for privileged
                    binaries
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: dynamic-link
          Assignee: unassigned at sourceware dot org
          Reporter: ppluzhnikov at google dot com
  Target Milestone: ---

>From https://sourceware.org/ml/libc-alpha/2015-09/msg00164.html

---
The issue is that the LD_POINTER_GUARD in the
environment is not sanitized allowing local attackers easily to bypass
the pointer guarding protection on set-user-ID and set-group-ID
programs. 

Details of the weakness:
http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html
---

CVE request: http://www.openwall.com/lists/oss-security/2015/09/05/8

-- 
You are receiving this mail because:
You are on the CC list for the bug.