Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-6164
7.2
HIGHCVSS v2
Published
November 29, 2006
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous variables such as LD_PRELOAD to loading processes, which might be leveraged to gain privileges.
libressl/openbsd
GitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.
GitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.= 3.9, = 4.0NVD