CVE-1999-1182

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Jul 17, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-1182 is a buffer overflow vulnerability affecting Linux systems' run-time linkers, specifically ld.so or ld-linux.so. Maliciously crafted long program names (argv[0]) can be used by local users to trigger an error report, resulting in privilege escalation. This issue allows attackers to execute arbitrary code with elevated privileges. The vulnerability was first identified in 1999 and poses a significant threat to Linux systems, emphasizing the importance of operating system updates and user awareness.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Debian
  • Red Hat Enterprise Linux
  • SUSE Linux Enterprise Server

Affected Vendors

  • Debian
  • Red Hat
  • SUSE Linux GmbH