🛡️ CVE-2023-4911
7.8
CVSS Score
0 Low4 Medium7 High9 Critical10
Description
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Details
Severity
HIGH
CVSS Score
7.8
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-122
Public Exploit
⚠️ Yes
Source
NVD
Published
2023-10-03
Updated
2026-06-08
Modified
2026-05-12
Affected Packages
| Software | From version | Fixed in |
|---|---|---|
| bootstrap-os | — | — |
| codeready-linux-builder | — | — |
| codeready-linux-builder-eus | — | — |
| codeready-linux-builder-for-arm64 | — | — |
| codeready-linux-builder-for-arm64-eus | — | — |
| codeready-linux-builder-for-ibm-z-systems | — | — |
| codeready-linux-builder-for-ibm-z-systems-eus | — | — |
| codeready-linux-builder-for-power-little-endian | — | — |
| codeready-linux-builder-for-power-little-endian-eus | — | — |
| debian-linux | — | — |
| enterprise-linux | — | — |
| enterprise-linux-eus | — | — |
| enterprise-linux-for-arm-64 | — | — |
| enterprise-linux-for-arm-64-eus | — | — |
| enterprise-linux-for-ibm-z-systems | — | — |
| enterprise-linux-for-ibm-z-systems-eus | — | — |
| enterprise-linux-for-ibm-z-systems-eus-s390x | — | — |
| enterprise-linux-for-power-big-endian-eus | — | — |
| enterprise-linux-for-power-little-endian | — | — |
| enterprise-linux-for-power-little-endian-eus | — | — |
| enterprise-linux-server-aus | — | — |
| enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | — | — |
| enterprise-linux-server-tus | — | — |
| enterprise-linux-update-services-for-sap-solutions | — | — |
| fedora | — | — |
| glibc | 2.34 | 2.39 |
| h300s-firmware | — | — |
| h410c-firmware | — | — |
| h410s-firmware | — | — |
| h500s-firmware | — | — |
| h700s-firmware | — | — |
| ontap-select-deploy-administration-utility | — | — |
| simatic-s7-1500-cpu-1518-4-pn\/dp-mfp-firmware | 3.1.5 | — |
| simatic-s7-1500-cpu-1518f-4-pn\/dp-mfp-firmware | 3.1.5 | — |
| simatic-s7-1500-tm-mfp-firmware | — | 1.1 |
| siplus-s7-1500-cpu-1518-4-pn\/dp-mfp-firmware | 3.1.5 | — |
| ubuntu-linux | — | — |
| virtualization | — | — |
| virtualization-host | — | — |
References
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5453
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5454
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5455
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5476
Third Party Advisory https://access.redhat.com/errata/RHSA-2024:0033
Third Party Advisory https://access.redhat.com/security/cve/CVE-2023-4911
Issue Tracking, Patch https://bugzilla.redhat.com/show_bug.cgi?id=2238352
Exploit, Third Party Advisory https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
Third Party Advisory https://www.qualys.com/cve-2023-4911/
Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
Exploit, Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2023/Oct/11
Exploit, Mailing List http://www.openwall.com/lists/oss-security/2023/10/03/2
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5453
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5454
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5455
Third Party Advisory https://access.redhat.com/errata/RHSA-2023:5476
Third Party Advisory https://access.redhat.com/errata/RHSA-2024:0033
Third Party Advisory https://access.redhat.com/security/cve/CVE-2023-4911
Issue Tracking, Patch https://bugzilla.redhat.com/show_bug.cgi?id=2238352
Mailing List https://lists.fedoraproject.org/archives/list/[email protected]/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/
Mailing List https://lists.fedoraproject.org/archives/list/[email protected]/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/
Mailing List https://lists.fedoraproject.org/archives/list/[email protected]/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/
Third Party Advisory https://security.gentoo.org/glsa/202310-03
Third Party Advisory https://security.netapp.com/advisory/ntap-20231013-0006/
Mailing List https://www.debian.org/security/2023/dsa-5514
Exploit, Third Party Advisory, VDB Entry https://www.exploit-db.com/exploits/52479
Exploit, Third Party Advisory https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
Third Party Advisory https://www.qualys.com/cve-2023-4911/
Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-794697.html
Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-831302.html
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911
Similar Threats
- Low CVE-2024-11053
- Medium CVE-2024-21140
- High CVE-2024-21147
- High CVE-2023-29483
- Low CVE-2024-2004
Free Vulnerability Check
Is your WordPress site affected?
BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.
Scan My Site Free →No credit card required · Results in minutes
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
