CVE-2019-1010023

CVE-2019-1010023 describes a vulnerability in GNU Libc (glibc) where a malicious ELF file can remap a currently loaded library, potentially leading to privilege escalation. The attack requires an attacker to send two ELF files to a victim and convince them to run 'ldd' on them, which then executes code. This vulnerability carries a high CVSS score of 8.8, indicating significant potential impact (confidentiality, integrity, availability) with low attack complexity, but relies on user interaction. Despite its severity, upstream developers consider it a non-security bug with no real threat, and there is no known active exploitation, publicly available exploit code, or significant community discussion.