Unscored severity · published Nov 6, 2010
CVE-2010-4000
gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnome-shell · Gnome
2.31.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4000
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=644561
More from Gnome-shell
8.1
CVE-2017-8288
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen
6.1
CVE-2021-20315
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are…
5.5
CVE-2023-43090
A vulnerability was found in GNOME Shell
5.5
CVE-2021-3982
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue
4.3
CVE-2020-17489
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4