CVE-2009-5064: ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a...

Security readout for executives and security teams

This CVE concerns old GNU glibc ldd behavior where inspecting a hostile executable could unexpectedly run code. The business risk is mainly legacy Linux exposure and unsafe handling of untrusted binaries. The record is disputed by the GNU glibc vendor, and the provided sources do not show active exploitation. Legacy Linux systems using glibc/libc6 2.13 or earlier are the stated exposure. Practical risk depends on whether privileged users, scripts, or triage workflows run ldd on untrusted executables. Treat this as a legacy hygiene and unsafe-operations issue, not an emergency based on current evidence. Prioritize systems that still run obsolete glibc and handle untrusted binaries in privileged workflows. Mitigation focus: Inventory systems for glibc/libc6 2.13 or earlier.; Apply distribution glibc updates where vendor advisories apply.; Do not run ldd on untrusted executables, especially as root..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.