CVE-2016-10151 The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via t...
HighCVSS 7.0
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/hesiod(Debian:12) | < 3.2.1-3.1 | 3.2.1-3.1 |
| debian/hesiod(Debian:13) | < 3.2.1-3.1 | 3.2.1-3.1 |
| debian/hesiod(Debian:14) | < 3.2.1-3.1 | 3.2.1-3.1 |
| hesiod project hesiod | = 3.2.1 | No fix listed |
References
- Debian Security Tracker CVE-2016-10151 vendor-advisory
- [oss-security] 20170120 Re: CVE Request: two flaws in hesiod permitting privilege elevation mailing-list patch third-party-advisory
- 90952 vdb-entry
- bugzilla.redhat.com issue-tracking
- github.com issue-tracking patch third-party-advisory
- GLSA-201805-01 vendor-advisory
- bugs.debian.org issue-tracking