Debian Bug report logs - #1087697
Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH

Reply or subscribe to this bug.

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Matan Liber <matan@pentera.io>

To: submit@bugs.debian.org

Subject: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH

Date: Sun, 17 Nov 2024 14:04:54 +0200

[Message part 1 (text/plain, inline)]

Package: initramfs-tools
Version: 0.136ubuntu6.7

vulnerability identified in mkinitramfs that could lead to a Denial of
Service (DoS) condition on affected systems. Using mkinitramfs with
the environment variable LD_LIBRARY_PATH causes machines to fail boot
due to missing libraries in the initramfs images. A full report is
attached.

[Message part 2 (text/html, inline)]

[Debian Mkinitramfs Vulnerability.pdf (application/pdf, attachment)]

Message #10 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Matan Liber <matan@pentera.io>, 1087697@bugs.debian.org

Cc: submit@bugs.debian.org

Subject: Re: Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH

Date: Sun, 17 Nov 2024 20:29:49 +0100

Control: notfound -1 0.136ubuntu6.7
Control: found -1 0.145

FWIW, this is similar to what was handled in #944929 fixed with commit
e2ad67899850 ("hook-functions: preloaded libraries should not end up
in the initramfs").

Regards,
Salvatore

Message #24 received at 1087697@bugs.debian.org (full text, mbox, reply):

From: Ben Hutchings <ben@decadent.org.uk>

To: 1087697@bugs.debian.org, Matan Liber <matan@pentera.io>

Subject: Re: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH

Date: Sun, 24 Nov 2024 21:48:50 +0100

[Message part 1 (text/plain, inline)]

On Sun, 17 Nov 2024 14:04:54 +0200 Matan Liber <matan@pentera.io>
wrote:
> Package: initramfs-tools
> Version: 0.136ubuntu6.7
> 
> vulnerability identified in mkinitramfs that could lead to a Denial
of
> Service (DoS) condition on affected systems. Using mkinitramfs with
> the environment variable LD_LIBRARY_PATH causes machines to fail boot
> due to missing libraries in the initramfs images. A full report is
> attached.

This isn't a security vulnerability.  If an attacker can control
LD_LIBRARY_PATH for a user session then they can already cause
arbitrary code to be run as that user.

I may address this as an issue of robustness, but it's not going to
have a high priority.

Ben.

-- 
Ben Hutchings
Any smoothly functioning technology is indistinguishable
from a rigged demo.

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.