CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4911

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.626

EPSS Ranking 98.3%

CVSS Severity

CVSS v3 Score 7.8

Proposed Action

GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

Ransomware Campaign

Unknown

References

Products affected by CVE-2023-4911

Gnu » Glibc » Version: 2.34

cpe:2.3:a:gnu:glibc:2.34
Gnu » Glibc » Version: 2.34.9000

cpe:2.3:a:gnu:glibc:2.34.9000
Gnu » Glibc » Version: 2.35

cpe:2.3:a:gnu:glibc:2.35
Gnu » Glibc » Version: 2.35.9000

cpe:2.3:a:gnu:glibc:2.35.9000
Gnu » Glibc » Version: 2.36

cpe:2.3:a:gnu:glibc:2.36
Gnu » Glibc » Version: 2.36.113

cpe:2.3:a:gnu:glibc:2.36.113
Gnu » Glibc » Version: 2.36.9000

cpe:2.3:a:gnu:glibc:2.36.9000
Gnu » Glibc » Version: 2.37

cpe:2.3:a:gnu:glibc:2.37
Gnu » Glibc » Version: 2.37.38

cpe:2.3:a:gnu:glibc:2.37.38
Gnu » Glibc » Version: 2.37.9000

cpe:2.3:a:gnu:glibc:2.37.9000
Gnu » Glibc » Version: 2.38

cpe:2.3:a:gnu:glibc:2.38
Gnu » Glibc » Version: 2.38.19

cpe:2.3:a:gnu:glibc:2.38.19
Gnu » Glibc » Version: 2.38.9000

cpe:2.3:a:gnu:glibc:2.38.9000
Netapp » Ontap Select Deploy Administration Utility » Version: N/A

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
Redhat » Codeready Linux Builder » Version: 9.0

cpe:2.3:a:redhat:codeready_linux_builder:9.0
Redhat » Codeready Linux Builder Eus » Version: 8.6

cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6
Redhat » Codeready Linux Builder Eus » Version: 9.2

cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2
Redhat » Codeready Linux Builder Eus » Version: 9.4

cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4
Redhat » Codeready Linux Builder For Arm64 » Version: 9.0_aarch64

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64
Redhat » Codeready Linux Builder For Arm64 Eus » Version: 8.6

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6
Redhat » Codeready Linux Builder For Arm64 Eus » Version: 9.2_aarch64

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64
Redhat » Codeready Linux Builder For Arm64 Eus » Version: 9.4_aarch64

cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64
Redhat » Codeready Linux Builder For Ibm Z Systems » Version: 9.0_s390x

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x
Redhat » Codeready Linux Builder For Ibm Z Systems Eus » Version: 8.6

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.6
Redhat » Codeready Linux Builder For Ibm Z Systems Eus » Version: 9.2_s390x

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x
Redhat » Codeready Linux Builder For Ibm Z Systems Eus » Version: 9.4_s390x

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x
Redhat » Codeready Linux Builder For Power Little Endian » Version: 9.0_ppc64le

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le
Redhat » Codeready Linux Builder For Power Little Endian Eus » Version: 8.6

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.6
Redhat » Codeready Linux Builder For Power Little Endian Eus » Version: 9.2_ppc64le

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le
Redhat » Codeready Linux Builder For Power Little Endian Eus » Version: 9.4_ppc64le

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le
Redhat » Virtualization » Version: 4.0

cpe:2.3:a:redhat:virtualization:4.0
Redhat » Virtualization Host » Version: 4.0

cpe:2.3:a:redhat:virtualization_host:4.0
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410c » Version: N/A

cpe:2.3:h:netapp:h410c:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Canonical » Ubuntu Linux » Version: 22.04

cpe:2.3:o:canonical:ubuntu_linux:22.04
Canonical » Ubuntu Linux » Version: 23.04

cpe:2.3:o:canonical:ubuntu_linux:23.04
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 12.0

cpe:2.3:o:debian:debian_linux:12.0
Fedoraproject » Fedora » Version: 37

cpe:2.3:o:fedoraproject:fedora:37
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38
Fedoraproject » Fedora » Version: 39

cpe:2.3:o:fedoraproject:fedora:39
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410c Firmware » Version: N/A

cpe:2.3:o:netapp:h410c_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0
Redhat » Enterprise Linux Eus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_eus:8.6
Redhat » Enterprise Linux Eus » Version: 9.2

cpe:2.3:o:redhat:enterprise_linux_eus:9.2
Redhat » Enterprise Linux Eus » Version: 9.4

cpe:2.3:o:redhat:enterprise_linux_eus:9.4
Redhat » Enterprise Linux For Arm 64 » Version: 9.0_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 8.6_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 9.2_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2_aarch64
Redhat » Enterprise Linux For Arm 64 Eus » Version: 9.4_aarch64

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64
Redhat » Enterprise Linux For Ibm Z Systems » Version: 9.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 9.2_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 9.4_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus S390x » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus_s390x:8.6
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 8.6_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:8.6_ppc64le
Redhat » Enterprise Linux For Power Little Endian » Version: 9.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 9.2_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 9.4_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le
Redhat » Enterprise Linux Server Aus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6
Redhat » Enterprise Linux Server Aus » Version: 9.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2
Redhat » Enterprise Linux Server Aus » Version: 9.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 9.2_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 9.4_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le
Redhat » Enterprise Linux Server Tus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4911

Products

Pricing

Contact Us