CVE-2023-4911

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 3, 2023
Updated: Feb 22, 2024
CWE ID 122
CWE ID 787

Summary

CVE-2023-4911, also known as Looney Tunables, is a high-severity vulnerability discovered in the GNU C Library's dynamic loader ld.so. This vulnerability affects various products and has a high risk score of 99. It allows a local attacker to exploit the buffer overflow by using malicious GLIBC_TUNABLES environment variables when launching binaries with SUID permission, potentially executing code with elevated privileges. The affected products include those with the product IDs s5UiSY, aXjN6B, n13ykY, X8hVjP, unYjm4, r-ztLR, r_8Qij, d0rE62, unYjm3, nv-TCv, jlwd6o, YGkc3w, m0O3iY, eCJhKK, sv5ozB, sv5ozC, of2JBh, uhlvgo, s5UiRj, of2JBp, qCa9ud, sgaPmf m0O3iP , sgaPme , and of2JBt. To remediate this vulnerability and mitigate potential danger to an organization's security and data integrity, it is recommended to apply patches or updates provided by the respective product vendors.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4911 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options