CVE-2023-4911

7.8

CVSS
High

PUBLISHED

Glibc: buffer overflow in ld.so leading to privilege escalation

Exploited in the wild Low complexity No user interaction

Vendor: , Red Hat
Product: , Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7
Published: Oct 03, 2023
EPSS: —

Description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

linux cisa metasploit

CVSS scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-11-21 00:00:00 UTC · Source

SSVC decision points

Exploitation: active
Automatable: No
Technical impact: total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CISA	Nov 21, 2023

Scanner integrations

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_tunables_priv_esc.rb	Apr 28, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

glibc_tunables_priv_esc

metasploit · Created Unknown

Metasploit module for CVE-2023-4911

NishanthAnand21/CVE-2023-4911-PoC

github · Created 2024-01-20 18:47:07 UTC · 2 stars

Repository containing a Proof of Concept (PoC) demonstrating the impact of CVE-2023-4911, a vulnerability in glibc's ld.so dynamic loader, exposing risks related to Looney Tunables.

yanfernandess/Looney-Tunables-CVE-2023-4911

github · Created 2024-01-19 18:20:05 UTC · 2 stars

puckiestyle/CVE-2023-4911

github · Created 2023-12-23 11:54:40 UTC · 0 stars

Diego-AltF4/CVE-2023-4911

github · Created 2023-10-28 20:05:30 UTC · 8 stars

Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit

KernelKrise/CVE-2023-4911

github · Created 2023-10-25 11:59:34 UTC · 11 stars

Looney Tunables Local privilege escalation (CVE-2023-4911) workshop

ruycr4ft/CVE-2023-4911

github · Created 2023-10-11 14:49:22 UTC · 16 stars