---
id: 1693
title: "Readline crime: exploiting a SUID logic bug"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/"
published_at: "2023-02-16T13:00:00Z"
tags: ["linux", "privilege-escalation", "exploit", "lateral-movement", "vulnerability-analysis", "suid", "readline", "logic-bug", "environment-variable", "chfn"]
phying_url: "https://phying.com/item/1693"
lang: en
---

# Readline crime: exploiting a SUID logic bug

## Summary

A logic bug in readline leaks partial file contents when parsing the INPUTRC environment variable, exploitable via SUID binaries like chfn for lateral movement; reported and patched in February 2022.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-02-16T13:00:00Z
- **Original:** https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/
- **Phying News:** https://phying.com/item/1693