CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-10-03
GNU C Library (glibc) ld.so Dynamic Loader Buffer Overflow Vulnerability (CVE-2023-4911, Looney Tunables) Analysis and Remediation Guide
[Affected Scope] Major Linux distributions (RHEL, Ubuntu, Debian, Fedora, etc.) running glibc version 2.34 and newer that support the GLIBC_TUNABLES environment variable.
[Impact] Local attackers can exploit a heap-based buffer overflow by crafting malicious GLIBC_TUNABLES environment variables when executing SUID binaries, leading to full root privilege escalation.
[Mitigation] Immediately update the glibc package to the latest patched version using the OS package manager and reboot the system.