$ cve CVE-2010-3856 JSON

CVE-2010-3856 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 11.2% (pctl 96)

Patch early

A public exploit exists.

Description

ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.

Scoring

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	11.16% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2011-01-07
Last modified	2026-06-16

Affected (1)

Vendor	Product
gnu	glibc

Public exploits

Source	Title	Date
exploit-db	glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation (Metasploit)	2018-02-12
exploit-db	glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation	2011-11-10
exploit-db	GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation	2010-10-22

References

→ the Explorer · watch your stack · NVD