Sploitus

CVE-2010-3847

21 known exploits for CVE-2010-3847

elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.

Affected products
Red Hat, Glibc
Gnu Glibc
≤ 2.11.2, 1.00, 1.01, 1.02, 1.03, 1.04, 1.05, 1.06, 1.07, 1.08, 1.09, 1.09.1, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.1, 2.1.1, 2.1.1.6, 2.1.2, 2.1.3, 2.1.3.10, 2.1.9, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.10
CVSS 2.0
6.9 MEDIUM
EPSS
9.5% (95th percentile)
Weakness
CWE-59
NVD status
Modified
Published
2011-01-07
CVE-2010-3847 at NVD
Authoritative description, scoring and affected products

21 known exploits for CVE-2010-3847

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2010-3847
2026-08-27 KitPloitKITPLOIT
glibc LD_AUDIT libmemusage.so RHEL-Based Arbitrary DSO Load Privilege Escalation Exploit
2018-04-01 Marco IvaldiZDTRuby
glibc LD_AUDIT libmemusage.so RHEL-Based Arbitrary DSO Load Privilege Escalation
2018-03-30 Marco IvaldiPACKETSTORMRuby
glibc - '$ORIGIN' Expansion Privilege Escalation (Metasploit)
2018-02-12 MetasploitEXPLOITDBRuby
glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)
2018-02-12 MetasploitEXPLOITDBRuby
glibc $ORIGIN Expansion Privilege Escalation Exploit
2018-02-10 Tavis OrmandyZDTRuby
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-10 Tavis OrmandyPACKETSTORMRuby
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit
2018-02-10 Brendan ColesZDTRuby
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
2018-02-10 Marco IvaldiPACKETSTORMRuby
GNU C library dynamic linker $ORIGIN expansion Vulnerability
2014-07-01 RootSEEBUGPerl
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
2014-07-01 RootSEEBUG
Immunity Canvas: CVE_2010_3847
2011-01-07 Immunity CanvasCANVAS
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
2010-10-23 Tavis OrmandyZDT
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 Tavis OrmandyEXPLOITPACK
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 Tavis OrmandyEXPLOITDB
GNU C Library Dynamic Linker Arbitrary DSO dlopen
2010-10-22 Tavis OrmandyPACKETSTORM
GNU C library dynamic linker $ORIGIN expansion Vulnerability
2010-10-19 Tavis OrmandyZDTPerl
GNU C Library Dynamic Linker $ORIGIN Expansion Vulnerability
2010-10-19 Tavis OrmandyPACKETSTORMPerl
glibc '$ORIGIN' Expansion Privilege Escalation
2010-10-18 Tavis Ormandy, bcoles <bcoles@gmail.com>METASPLOITRuby
GNU C library dynamic linker - $ORIGIN Expansion
2010-10-18 Tavis OrmandyEXPLOITPACKPerl
GNU C library dynamic linker - '$ORIGIN' Expansion
2010-10-18 Tavis OrmandyEXPLOITDBPerl