Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-4911 Details

Description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-082556.html	siemens-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-794697.html	siemens-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-831302.html	siemens-SADP	Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911	CISA-ADP	US Government Resource
http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html	CVE	ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html	CVE	ExploitThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2023:5453	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5454	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5455	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5476	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0033	CVE	Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-4911	CVE	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2238352	CVE	Issue TrackingPatch
http://seclists.org/fulldisclosure/2023/Oct/11	CVE	ExploitMailing ListThird Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/	CVE	Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/	CVE	Mailing List
https://lists.fedoraproject.org/archives/list/[email protected]/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/	CVE	Mailing List
https://security.gentoo.org/glsa/202310-03	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20231013-0006/	CVE	Third Party Advisory
https://www.debian.org/security/2023/dsa-5514	CVE	Mailing List
https://www.exploit-db.com/exploits/52479	CVE	ExploitThird Party AdvisoryVDB Entry
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt	CVE	ExploitThird Party Advisory
https://www.qualys.com/cve-2023-4911/	CVE	Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/2	CVE	ExploitMailing List
http://www.openwall.com/lists/oss-security/2023/10/03/3	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2023/10/05/1	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2023/10/13/11	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2023/10/14/3	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2023/10/14/5	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2023/10/14/6	CVE	Mailing List
https://access.redhat.com/errata/RHSA-2023:5453	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5454	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5455	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:5476	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:0033	[email protected]	Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-4911	[email protected]	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2238352	[email protected]	Issue TrackingPatch
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt	[email protected]	ExploitThird Party Advisory
https://www.qualys.com/cve-2023-4911/	[email protected]	Third Party Advisory

see all 39 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
GNU C Library Buffer Overflow Vulnerability	Nov 21, 2023	Dec 12, 2023	Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]
CWE-122	Heap-based Buffer Overflow	[email protected]

Affected Products

Product	Versions
netapp bootstrap os	All versions
CPE cpe:2.3:o:netapp:bootstrap_os:-:::::::* Remediation No remediation found in references.
netapp hci compute node	All versions
CPE cpe:2.3:h:netapp:hci_compute_node:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens siplus s7-1500 cpu 1518-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens siplus s7-1500 cpu 1518-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:siplus_s7-1500_cpu_1518-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 tm mfp firmware	< 1.1
CPE cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:::::::: Remediation No remediation found in references.
siemens simatic s7-1500 tm mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:::::::* Remediation No remediation found in references.
gnu glibc	>= 2.34, < 2.39
CPE cpe:2.3:a:gnu:glibc:::::::: Remediation No remediation found in references.
fedoraproject fedora	37 38 39
CPE cpe:2.3:o:fedoraproject:fedora:37:::::::* cpe:2.3:o:fedoraproject:fedora:38:::::::* cpe:2.3:o:fedoraproject:fedora:39:::::::* Remediation No remediation found in references.
redhat codeready linux builder	9.0
CPE cpe:2.3:a:redhat:codeready_linux_builder:9.0:::::::* Remediation No remediation found in references.
redhat codeready linux builder eus	8.6 9.2 9.4 9.6
CPE cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:::::::* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:::::::* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:::::::* cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:::::::* Remediation No remediation found in references.
redhat codeready linux builder for arm64	9.0_aarch64
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:::::::* Remediation No remediation found in references.
redhat codeready linux builder for arm64 eus	8.6 9.2_aarch64 9.4_aarch64 9.6_aarch64
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.6_aarch64:::::::* Remediation No remediation found in references.
redhat codeready linux builder for ibm z systems	9.0_s390x
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:::::::* Remediation No remediation found in references.
redhat codeready linux builder for ibm z systems eus	8.6 9.2_s390x 9.4_s390x 9.6_s390x
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.6:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:::::::* Remediation No remediation found in references.
redhat codeready linux builder for power little endian	9.0_ppc64le
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:::::::* Remediation No remediation found in references.
redhat codeready linux builder for power little endian eus	8.6 9.2_ppc64le 9.4_ppc64le 9.6_ppc64le
CPE cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.6:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:::::::* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:::::::* Remediation No remediation found in references.
redhat virtualization	4.0
CPE cpe:2.3:a:redhat:virtualization:4.0:::::::* Remediation No remediation found in references.
redhat virtualization host	4.0
CPE cpe:2.3:a:redhat:virtualization_host:4.0:::::::* Remediation No remediation found in references.
redhat enterprise linux	8.0 9.0
CPE cpe:2.3:o:redhat:enterprise_linux:8.0:::::::* cpe:2.3:o:redhat:enterprise_linux:9.0:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	8.6 9.2 9.4 9.6
CPE cpe:2.3:o:redhat:enterprise_linux_eus:8.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:9.2:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:::::::* Remediation No remediation found in references.
redhat enterprise linux for arm 64	9.0_aarch64
CPE cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:::::::* Remediation No remediation found in references.
redhat enterprise linux for arm 64 eus	8.6_aarch64 9.2_aarch64 9.4_aarch64 9.6_aarch64
CPE cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2_aarch64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:::::::* Remediation No remediation found in references.
redhat enterprise linux for ibm z systems	9.0_s390x
CPE cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:::::::* Remediation No remediation found in references.
redhat enterprise linux for ibm z systems eus	9.2_s390x 9.4_s390x 9.6_s390x
CPE cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:::::::* Remediation No remediation found in references.
redhat enterprise linux for ibm z systems eus s390x	8.6
CPE cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus_s390x:8.6:::::::* Remediation No remediation found in references.
redhat enterprise linux for power big endian eus	8.6_ppc64le
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:8.6_ppc64le:::::::* Remediation No remediation found in references.
redhat enterprise linux for power little endian	9.0_ppc64le
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:::::::* Remediation No remediation found in references.
redhat enterprise linux for power little endian eus	9.2_ppc64le 9.4_ppc64le 9.6_ppc64le
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:::::::* Remediation No remediation found in references.
redhat enterprise linux server aus	8.6 9.2 9.4 9.6
CPE cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:::::::* Remediation No remediation found in references.
redhat enterprise linux server for power little endian update services for sap solutions	9.2_ppc64le 9.4_ppc64le 9.6_ppc64le
CPE cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:::::::* Remediation No remediation found in references.
redhat enterprise linux server tus	8.6
CPE cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:::::::* Remediation No remediation found in references.
redhat enterprise linux update services for sap solutions	9.2 9.4 9.6
CPE cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:::::::* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:::::::* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:::::::* Remediation No remediation found in references.
canonical ubuntu linux	22.04 23.04
CPE cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:23.04:::::::* Remediation No remediation found in references.
debian debian linux	11.0 12.0
CPE cpe:2.3:o:debian:debian_linux:11.0:::::::* cpe:2.3:o:debian:debian_linux:12.0:::::::* Remediation No remediation found in references.
netapp h410c firmware	All versions
CPE cpe:2.3:o:netapp:h410c_firmware:-:::::::* Remediation No remediation found in references.
netapp h410c	All versions
CPE cpe:2.3:h:netapp:h410c:-:::::::* Remediation No remediation found in references.
netapp h300s firmware	All versions
CPE cpe:2.3:o:netapp:h300s_firmware:-:::::::* Remediation No remediation found in references.
netapp h300s	All versions
CPE cpe:2.3:h:netapp:h300s:-:::::::* Remediation No remediation found in references.
netapp h500s firmware	All versions
CPE cpe:2.3:o:netapp:h500s_firmware:-:::::::* Remediation No remediation found in references.
netapp h500s	All versions
CPE cpe:2.3:h:netapp:h500s:-:::::::* Remediation No remediation found in references.
netapp h700s firmware	All versions
CPE cpe:2.3:o:netapp:h700s_firmware:-:::::::* Remediation No remediation found in references.
netapp h700s	All versions
CPE cpe:2.3:h:netapp:h700s:-:::::::* Remediation No remediation found in references.
netapp h410s firmware	All versions
CPE cpe:2.3:o:netapp:h410s_firmware:-:::::::* Remediation No remediation found in references.
netapp h410s	All versions
CPE cpe:2.3:h:netapp:h410s:-:::::::* Remediation No remediation found in references.
netapp ontap select deploy administration utility	All versions
CPE cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:::::::* Remediation No remediation found in references.

Change History

41 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	siemens-SADP
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 12, 2026	Modified Analysis	[email protected]
May 12, 2026	CVE Modified	siemens-SADP
Feb 13, 2026	Modified Analysis	[email protected]
Feb 13, 2026	CVE Modified	CVE
Jan 8, 2026	Modified Analysis	[email protected]
Jan 8, 2026	CVE Modified	[email protected]
Nov 6, 2025	Modified Analysis	[email protected]
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
May 6, 2025	Modified Analysis	[email protected]
Apr 30, 2025	CVE Modified	[email protected]
Jan 27, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Sep 17, 2024	Modified Analysis	[email protected]
Sep 16, 2024	CVE Modified	[email protected]
May 23, 2024	CVE Modified	[email protected]
May 14, 2024	CVE Modified	[email protected]
Feb 22, 2024	Modified Analysis	[email protected]
Jan 3, 2024	CVE Modified	[email protected]
Dec 21, 2023	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Oct 14, 2023	CVE Modified	[email protected]
Oct 14, 2023	CVE Modified	[email protected]
Oct 14, 2023	CVE Modified	[email protected]
Oct 14, 2023	CVE Modified	[email protected]
Oct 13, 2023	CVE Modified	[email protected]
Oct 6, 2023	CVE Modified	[email protected]
Oct 6, 2023	CVE Modified	[email protected]
Oct 5, 2023	CVE Modified	[email protected]
Oct 5, 2023	Initial Analysis	[email protected]
Oct 5, 2023	CVE Modified	[email protected]
Oct 5, 2023	CVE Modified	[email protected]
Oct 4, 2023	CVE Modified	[email protected]
Oct 4, 2023	CVE Modified	[email protected]
Oct 4, 2023	CVE Modified	[email protected]
Oct 3, 2023	CVE Modified	[email protected]
Oct 3, 2023	CVE Modified	[email protected]

CVE-2023-4911 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE