CVE-2023-4911
CVE-2023-4911 · Glibc: buffer overflow in ld.so leading to privilege escalation
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
CVSS 7.8 · High · EPSS 63.8% · In KEV · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 0:2.28-225.el8_8.6: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:2.28-189.6.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:2.34-60.el9_2.7: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 extended update support
- Versions
- ≥ 0:2.34-28.el9_0.4: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:2.28-189.6.el8_6: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.5.3-10.el8ev: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.5.3-202312060823_8.6: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
glibc Debian:12
- Versions
- 2.36-9
- 2.36-9+deb12u1
- 2.36-9+deb12u2
- Affected ranges
- ECOSYSTEM: < 2.36-9+deb12u3
Update to 2.36-9+deb12u3
glibc Debian:13
- Affected ranges
- ECOSYSTEM: < 2.37-12
Update to 2.37-12
glibc Debian:14
- Affected ranges
- ECOSYSTEM: < 2.37-12
Update to 2.37-12
glibc Ubuntu:22.04:LTS
- Versions
- 2.34-0ubuntu3
- 2.35-0ubuntu1
- 2.35-0ubuntu3
- 2.35-0ubuntu3.1
- 2.35-0ubuntu3.3
- Affected ranges
- ECOSYSTEM: < 2.35-0ubuntu3.4
Update to 2.35-0ubuntu3.4
glibc Ubuntu:24.04:LTS
- Affected ranges
- ECOSYSTEM: < 2.38-1ubuntu6
Update to 2.38-1ubuntu6
Original sources
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5454
- https://access.redhat.com/errata/RHSA-2023:5455
- https://access.redhat.com/errata/RHSA-2023:5476
- https://access.redhat.com/errata/RHSA-2024:0033
- https://access.redhat.com/security/cve/CVE-2023-4911
- https://bugzilla.redhat.com/show_bug.cgi?id=2238352
- https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
- https://www.qualys.com/cve-2023-4911/
- https://www.exploit-db.com/exploits/52479
- http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2023/Oct/11
- http://www.openwall.com/lists/oss-security/2023/10/03/2
- http://www.openwall.com/lists/oss-security/2023/10/03/3
- http://www.openwall.com/lists/oss-security/2023/10/05/1
- http://www.openwall.com/lists/oss-security/2023/10/13/11
- http://www.openwall.com/lists/oss-security/2023/10/14/3
- http://www.openwall.com/lists/oss-security/2023/10/14/5
- http://www.openwall.com/lists/oss-security/2023/10/14/6
- https://lists.fedoraproject.org/archives/list/[email protected]/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/
- https://nvd.nist.gov/vuln/detail/CVE-2023-4911