Back to CVE Browser

CVE-2023-4911

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-10-03

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Affected Platforms (CPE)

💻

Netapp

Bootstrap Os

All versions

💻

Siemens

Simatic S7 1500 Cpu 1518 4 Pn\/dp Mfp Firmware

>= 3.1.5

💻

Siemens

Simatic S7 1500 Cpu 1518f 4 Pn\/dp Mfp Firmware

>= 3.1.5

💻

Siemens

Siplus S7 1500 Cpu 1518 4 Pn\/dp Mfp Firmware

>= 3.1.5

References & Advisories

🔗 https://access.redhat.com/errata/RHSA-2023:5453

🔗 https://access.redhat.com/errata/RHSA-2023:5454

🔗 https://access.redhat.com/errata/RHSA-2023:5455

🔗 https://access.redhat.com/errata/RHSA-2023:5476

🔗 https://access.redhat.com/errata/RHSA-2024:0033

🔗 https://access.redhat.com/security/cve/CVE-2023-4911

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=2238352

🔗 https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

Related Vulnerabilities

CVE-2026-474079.4

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the Platform server e...

In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Prevent a crash...

In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Prevent a crash...

CVE-2026-630879.8

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid Plu...