Re:Ldd /usr/sbin/sshd – Alpine vs. Ubuntu for exploitability...
by kevincox on Monday April 01, 2024 @04:55PM
(#39899224)
A good time for a reminder that you shouldn't `ldd` untrusted executables. It basically works by executing them with some special flags that the linker picks up which causes it to print the report. If the binary is nefarious it can hijack this and run whatever it wants.
https://sourceware.org/git/?p=glibc.git;a=blob;f=elf/ldd.bas...