{"vulnerability": "cve-2025-4802", "sightings": [{"uuid": "ffc5a711-6871-49bd-a92c-913d646e2cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lpj5bipvnw2s", "content": "", "creation_timestamp": "2025-05-19T08:20:44.840381Z"}, {"uuid": "bef3a4c7-2499-4681-a505-5dc8290c3214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/114519287707457625", "content": "", "creation_timestamp": "2025-05-16T20:00:55.192732Z"}, {"uuid": "6ad77789-40c0-4d18-a3e7-07d563b188f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpcsyzo3zs2x", "content": "", "creation_timestamp": "2025-05-16T20:01:05.128711Z"}, {"uuid": "d1fef7e0-92a7-4407-8d03-ee2db7aa3625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114519343206247749", "content": "", "creation_timestamp": "2025-05-16T20:15:02.132654Z"}, {"uuid": "e424223a-82b8-4520-a8b3-b32eb31cd8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/159", "content": "", "creation_timestamp": "2025-05-16T19:58:38.000000Z"}, {"uuid": "157756a3-495f-4bee-bc0b-fb04b576de5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscswma4cf2u", "content": "", "creation_timestamp": "2025-06-24T00:15:18.538671Z"}, {"uuid": "f580d918-36bf-4687-9d81-20a2c4bcb2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/prohoster.bsky.social/post/3lpllwxgt6d2h", "content": "", "creation_timestamp": "2025-05-20T07:48:36.966819Z"}, {"uuid": "62a08738-787b-49b3-8a39-9bc737b9f920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/161", "content": "", "creation_timestamp": "2025-05-17T04:01:50.000000Z"}, {"uuid": "3ee73893-8a8b-4023-b58c-23f001cc004b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/grsecurity.bsky.social/post/3lptodrc7us2x", "content": "", "creation_timestamp": "2025-05-23T12:52:56.817351Z"}, {"uuid": "807ce779-af40-4ea8-adff-b16bf6368f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpinavinsc2k", "content": "", "creation_timestamp": "2025-05-19T03:34:06.644982Z"}, {"uuid": "80f71457-34a6-49cf-8195-273e49b2a49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhb2jk2p", "content": "", "creation_timestamp": "2025-05-15T06:57:47.592486Z"}, {"uuid": "2633d714-5204-4158-b305-2ef4efc6afd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48027", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhohzj2l", "content": "", "creation_timestamp": "2025-05-15T06:57:49.912672Z"}, {"uuid": "ce970998-e276-48e0-b344-7b11b4f65075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3ayfyuasw2c", "content": "", "creation_timestamp": "2025-10-15T19:34:49.479861Z"}, {"uuid": "7938e8ad-99a4-4df8-bf95-6477bb435781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3ayfzacav2l", "content": "", "creation_timestamp": "2025-10-15T19:34:50.548939Z"}, {"uuid": "89e14462-bba0-44f1-96fc-1dbba41d3b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3ayfzsd3g24", "content": "", "creation_timestamp": "2025-10-15T19:34:52.527476Z"}, {"uuid": "b5d87c74-579b-4852-b66e-3fd2f29ff711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupif2u65325", "content": "", "creation_timestamp": "2025-07-24T12:01:36.617675Z"}, {"uuid": "935e288b-a315-4b8f-8b42-4606b0c47783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48020", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-09", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "c9ccee20-aa6e-4185-8da3-afbb981314a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48021", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-09", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "2df2476d-b403-46ae-a357-f797c4b340b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48022", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-09", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "eebc16a8-f43a-4f83-b331-b9034db2899d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48023", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-09", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "9a5e2a34-11a3-4c05-9f84-10d8bf7ae66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4802", "type": "seen", "source": "https://infosec.exchange/users/raptor/statuses/115870010666953210", "content": "", "creation_timestamp": "2026-01-10T09:07:32.060870Z"}, {"uuid": "f52b8c29-b60a-42c6-b2f3-44a92cc42a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4802", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3mc2nyigq3ly2", "content": "", "creation_timestamp": "2026-01-10T09:15:45.410448Z"}, {"uuid": "53f3d6a5-0ead-4311-b6ec-2e9090a9532f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/alleleintel.com/post/3mjfmnlczz22j", "content": "", "creation_timestamp": "2026-04-13T19:40:24.070201Z"}, {"uuid": "19947307-444a-427d-b4ca-0a27791e86a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/alleleintel.com/post/3mjfmnld7uk2j", "content": "", "creation_timestamp": "2026-04-13T19:40:25.158802Z"}, {"uuid": "b503c00d-97c7-4e4b-b57d-bdd453180d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/alleleintel.com/post/3mjfmnldats2j", "content": "", "creation_timestamp": "2026-04-13T19:40:26.239311Z"}, {"uuid": "b6b0616e-8bb5-4a68-adfe-c0fd1e462ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjgdjcg6pl25", "content": "", "creation_timestamp": "2026-04-14T02:29:32.730658Z"}, {"uuid": "f12432cb-810a-4c6e-b8f4-609e9c251ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "published-proof-of-concept", "source": "Telegram/D-E8nBWEsZ9yuVLvf6JvfO0JzWMlEthKUB_mEicKSsUta-I", "content": "", "creation_timestamp": "2026-01-09T03:00:06.000000Z"}, {"uuid": "27a54cb2-96dc-429b-ba3d-65834dece2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48027", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48027\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver.\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T05:05:47.559Z\n\ud83d\udd17 References:\n1. https://github.com/kwburns/CVE/blob/main/pGina.Fork/3.9.9.12/README.md\n2. https://github.com/MutonUfoAI/pgina/blob/1922de0fe27492c09d2f188c2c7e54a4b364bbad/Plugins/HttpAuth/HttpAuth/Settings.cs#L44", "creation_timestamp": "2025-05-15T05:32:28.000000Z"}, {"uuid": "e3d610b5-febb-40cd-81c8-28843c21ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4802\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).\n\ud83d\udccf Published: 2025-05-16T19:32:50.586Z\n\ud83d\udccf Modified: 2025-05-16T19:32:50.586Z\n\ud83d\udd17 References:\n1. https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e\n2. https://sourceware.org/bugzilla/show_bug.cgi?id=32976", "creation_timestamp": "2025-05-16T20:35:06.000000Z"}, {"uuid": "49d2021e-043c-4ea7-a335-3b44deb97fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://t.me/purp_sec/653", "content": "\ud83d\udd12 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 glibc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f LD_LIBRARY_PATH \u0432 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 setuid-\u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e dlopen \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 libc. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0432 \u043f\u0443\u0442\u044f\u0445, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 LD_LIBRARY_PATH. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u044d\u0442\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0427\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441: \n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c glibc \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.39.\n\ud83d\udd35 \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 setuid-\u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u2014 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 find / -perm -4000 -exec file {} \\; | grep \"statically linked\".\n\ud83d\udd35 \u0412\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SELinux \u0438\u043b\u0438 AppArmor, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0411\u0430\u0433\u0443 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u2014 CVE-2025-4802.\n\n#blue_team #Linux #glibc", "creation_timestamp": "2026-08-14T16:00:12.757835Z"}, {"uuid": "1ef0449e-e27b-43d4-8504-5739a0d318e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4802", "type": "seen", "source": "https://t.me/purp_sec/653", "content": "\ud83d\udd12 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 glibc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f LD_LIBRARY_PATH \u0432 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 setuid-\u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e dlopen \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 libc. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0432 \u043f\u0443\u0442\u044f\u0445, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 LD_LIBRARY_PATH. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u044d\u0442\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0427\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441: \n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c glibc \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.39.\n\ud83d\udd35 \u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 setuid-\u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u2014 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 find / -perm -4000 -exec file {} \\; | grep \"statically linked\".\n\ud83d\udd35 \u0412\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a SELinux \u0438\u043b\u0438 AppArmor, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0411\u0430\u0433\u0443 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u2014 CVE-2025-4802.\n\n#blue_team #Linux #glibc", "creation_timestamp": "2026-08-15T00:00:07.805405Z"}]}