• info
• discussion
• exploit
• solution
• references

GNU GLibC LD.SO Mask Dynamic Loader Integer Overflow Vulnerability

GNU glibc is prone to an integer-overflow vulnerability because it fails to properly ensure that integer math operations do not wrap around.

An attacker can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of affected application. Failed exploit attempts will result in a denial of service.

GNU glibc 2.5 and prior versions are prone to this issue.