CyberRota Analysis
AI-GeneratedGNU libextractor versions prior to 1.16 are vulnerable due to improper privilege checks when loading plugins from an untrusted directory specified by the LIBEXTRACTOR_PREFIX environment variable. This flaw allows local attackers to execute arbitrary code with elevated privileges by placing malicious plugins in the specified directory, particularly affecting setuid or setgid programs. Organizations utilizing GNU libextractor should prioritize patching this vulnerability to mitigate the risk of local privilege escalation attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTOR_PREFIX environment variable without proper privilege checks. A local attacker can exploit this by setting LIBEXTRACTOR_PREFIX to a directory containing a malicious plugin that executes arbitrary code with elevated privileges when loaded by a setuid or setgid program.