CVE-2024-42381: High severity homebrew vulnerability
os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp section. NOTE: this code execution would occur during an un-sandboxed binary relocation phase, which occurs before a user would expect execution of downloaded package content. (237d1e783f7ee261beaba7d3f6bde22da7148b0a was the tested vulnerable version.)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42381?
CVE-2024-42381 is considered a significant vulnerability that allows code execution from untrusted ELF files.
How do I fix CVE-2024-42381?
To fix CVE-2024-42381, upgrade Homebrew brew to version 4.2.20 or later.
What causes CVE-2024-42381?
CVE-2024-42381 is caused by the use of ldd to load ELF files from untrusted sources, which can lead to code execution.
Who is affected by CVE-2024-42381?
CVE-2024-42381 affects all versions of Homebrew brew prior to 4.2.20.
What can attackers achieve with CVE-2024-42381?
Attackers can achieve code execution during the un-sandboxed binary relocation phase by exploiting CVE-2024-42381.