CVE-2016-10151

Priority
Description
The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with
UID to determine whether to use configurations from environment variables,
which allows local users to gain privileges via the (1) HESIOD_CONFIG or
(2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID
binary.
More Information

Updated: 2019-01-14 21:18:25 UTC (commit 51f9b73af244ba86b9321e46e526586c25a8e060)