CVE-2024-42381

Summary

CVE-2024-42381 is a vulnerability affecting the os/linux/elf.rb component in Homebrew before version 4.2.20. This issue arises due to the use of the ldd tool to load ELF files from untrusted sources. Attackers can exploit this vulnerability by crafting an ELF file with a manipulated .interp section, leading to code execution during the un-sandboxed binary relocation phase. This phase occurs before the expected execution of downloaded package content, increasing the risk to users. (Note: The vulnerability was confirmed in version 237d1e783f7ee261beaba7d3f6bde22da7148b0a.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.