CVE-2025-4802

Published: May 16, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

Affected (1)

Products: Gnu: Glibc

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	From 2.27 to 2.38

Related CWEs

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (5)

https://sourceware.org/bugzilla/show_bug.cgi?id=32976

Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18

Issue Tracking

https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e

Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18

Patch

http://www.openwall.com/lists/oss-security/2025/05/16/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2025/05/17/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing List

https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.