CVE-2010-3856

CVE-2010-3856 describes a privilege escalation vulnerability in the GNU C Library (glibc) affecting versions before 2.11.3 and 2.12.x before 2.12.2. This flaw allows local users to gain elevated privileges by manipulating the LD_AUDIT environment variable to load an arbitrary dynamic shared object (DSO) from a trusted library directory. The vulnerability has a CVSS score of 7.2, indicating high severity with complete confidentiality, integrity, and availability impacts, requiring local access with low attack complexity. While not currently on CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, demonstrating its exploitability. Despite the availability of exploit code, there is minimal community discussion or media coverage surrounding this decade-old vulnerability.