cve/2015/CVE-2015-8777.md

CVE-2015-8777

Description

The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.

POC

Reference

• http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html

Github

No PoCs found on GitHub currently.