CVE-2010-3847

CVE-2010-3847 is a local privilege escalation vulnerability affecting the GNU C Library (glibc) versions through 2.11.2 and 2.12.x through 2.12.1. It arises from improper handling of the $ORIGIN value for the LD_AUDIT environment variable in ld.so, allowing local users to gain privileges by loading a crafted dynamic shared object (DSO). The vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, with a local attack vector and medium attack complexity. While not listed on the KEV catalog, multiple Metasploit modules and ExploitDB entries exist, demonstrating readily available exploit code. Despite this, there is no recorded community discussion or media coverage, suggesting it is not widely discussed or actively exploited in the wild.