Servers and applications
CVE-2011-1658
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment…
- Severity
- Low 3.7
- Published
- 8 Apr 2011
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 0.3% in the next 30 daysHigher than 24% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-264
- Attack
- Needs local access · Only under certain conditions · No login needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:L/AC:H/Au:N/C:P/I:P/A:P- Sources
- NVD
Description
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.
Affected software
| Software | Affected versions |
|---|---|
GNU C LibraryServers and applications · cpe:a:gnu:glibc |
All 58 release lines
|