CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
KEVHIGH 7.8EPSS 63.8%
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
- Affected
- Red Hat · glibc · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.6 Extended Update Support · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 9.0 Extended Update Support · Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 63.77% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2023-11-21
- Nuclei
- high
- Published
- 2023-10-03
- Updated
- 2026-10-14
Proof-of-concept exploits (23)
- http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2023/Oct/11
- https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalatio…
- Billar42/CVE-2023-49110★ · 2025-02-18
- Diego-AltF4/CVE-2023-49118★ · 2024-11-03
- Green-Avocado/CVE-2023-491115★ · 2023-10-05
- KernelKrise/CVE-2023-491118★ · 2024-10-01
- KillReal01/CVE-2023-49110★ · 2025-03-17
- NishanthAnand21/CVE-2023-4911-PoC8★ · 2024-11-13
- RickdeJager/CVE-2023-4911167★ · 2023-10-08
- b4k3d/POC_CVE49110★ · 2023-10-08
- chaudharyarjun/LooneyPwner43★ · 2023-10-18
- guffre/CVE-2023-49110★ · 2023-12-09
- hadrian3689/looney-tunables-CVE-2023-491129★ · 2023-10-15
- leesh3288/CVE-2023-4911393★ · 2023-10-04
- puckiestyle/CVE-2023-49112★ · 2023-12-23
- ruycr4ft/CVE-2023-491119★ · 2023-10-11
- snurkeburk/Looney-Tunables0★ · 2023-12-10
- vscvetkov/code0★ · 2025-03-22
- xiaoQ1z/CVE-2023-49111★ · 2023-10-08
- baeseungwon1010/CVE-2023-49110★ · 2026-07-12
- jarpex/cve-2023-4911-exploit-optimized4★ · 2026-09-07
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (1)
Security advisories
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5454
- https://access.redhat.com/errata/RHSA-2023:5455
- https://access.redhat.com/errata/RHSA-2023:5476
- https://access.redhat.com/errata/RHSA-2024:0033
- https://access.redhat.com/security/cve/CVE-2023-4911
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
- https://security.gentoo.org/glsa/202310-03
- https://security.netapp.com/advisory/ntap-20231013-0006
- https://www.qualys.com/cve-2023-4911
- https://bugzilla.redhat.com/show_bug.cgi?id=2238352