CVE-2016-10151

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which…

published March 1, 2017

CVSS
—
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00391 · 31.8th percentile
Published
2017-03-01T20:00Z
EPSS history
Timeline
  • 01 MAR 20:00Z
    The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which…
    cvelistv5