CVE-2025-4802

Published May 16, 2025

Last updated 21 days ago

glibc

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-4802 involves an untrusted LD_LIBRARY_PATH environment variable vulnerability found in the GNU C Library (glibc) versions 2.27 to 2.38. This vulnerability allows an attacker to control the loading of dynamically shared libraries. Specifically, the issue affects statically compiled setuid binaries that call dlopen, including internal dlopen calls made after setlocale or calls to NSS functions like getaddrinfo. An attacker could potentially exploit this to execute arbitrary code or escalate privileges by manipulating the library path in setuid binaries.

Description: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).
Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

3ff69d7a-14f2-4f67-a097-88dee7810d18: CWE-426

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "29CCC9F6-2130-4DA8-8B5D-7A00337CBC0A",
            "versionEndIncluding": "2.38",
            "versionStartIncluding": "2.27"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.