CVE-2023-4911
- Reference to the description:
- Description:
- A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
- Last updated date:
- 01/27/2025
Reports
ACTIVELY EXPLOITED
- Type:
- exploitation
- Confidence:
- HIGH
- Date of publishing:
- 11/03/2023
- Reference url to background
https://blog.aquasec.com/loony-tunables-vulnerability-exploited-by-kinsing
- Type:
- exploitation
- Confidence:
- HIGH
- Date of publishing:
- 11/21/2023
- Reference url to background
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/04/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/04/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/04/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/05/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/05/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/05/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/10/2023
- Reference url to background
https://github.com/hadrian3689/looney-tunables-CVE-2023-4911
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/11/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/17/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/25/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/28/2023
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 12/20/2023
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 02/22/2024
- Reference url to background
http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 02/22/2024
- Reference url to background
http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 02/22/2024
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 03/16/2024
- Reference url to background