BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

7.8 HIGHEPSS 63.76%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
7.8HIGH3.1redhat (CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Dec 12, 2023

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2023-4911
Status
Analyzed
Assigner (CNA)
redhat
Published
Oct 3, 2023
Last modified
2026-11-07 12:17 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:02 UTC.