Lucene search
Gentoo FoundationMGASA-2023-0286HistoryOct 12, 2023 - 12:04 a.m.
Updated glibc packages fix a security vulnerability
2023-10-1200:04:02
Gentoo Foundation
advisories.mageia.org
28
glibc
buffer overflow
dynamic loader
local attacker
suid permission
cve-2023-4911
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.014 Low
EPSS
Percentile
86.5%
The updated packages fix a security vulnerability: A buffer overflow was discovered in the GNU C Library’s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. (CVE-2023-4911)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | glibc | < 2.32-32 | glibc-2.32-32.mga8 |
| Mageia | 9 | noarch | glibc | < 2.36-51 | glibc-2.36-51.mga9 |
Related
osv
osv
glibc - security update
2023-10-03 00:00:00
CVE-2023-4911
2023-10-03 18:15:10
glibc vulnerabilities
2023-10-03 18:04:23
redhatcve
redhatcve
CVE-2023-4911
2023-10-03 17:24:53
nessus
nessus
CBL Mariner 2.0 Security Update: glibc (CVE-2023-4911)
2023-10-13 00:00:00
Oracle Linux 8 : glibc (ELSA-2023-12851)
2023-10-05 00:00:00
Oracle Linux 8 : glibc (ELSA-2023-12853)
2023-10-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-4911 affecting package glibc for versions less than 2.35-5
2023-10-11 01:41:59
oraclelinux
oraclelinux
glibc security update
2023-10-05 00:00:00
glibc security update
2023-10-09 00:00:00
glibc security update
2023-10-05 00:00:00
broadcom
broadcom
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so
2024-01-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2331
2024-01-30 08:06:33
Advisory ROSA-SA-2024-2332
2024-01-30 08:26:13
nvd
nvd
CVE-2023-4911
2023-10-03 18:15:10
redhat
redhat
(RHSA-2023:5454) Important: glibc security update
2023-10-05 10:06:44
(RHSA-2023:5476) Important: glibc security update
2023-10-05 13:52:32
zdt
zdt
Glibc Tunables Privilege Escalation Exploit
2023-12-21 00:00:00
glibc ld.so Local Privilege Escalation Vulnerability
2023-10-08 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Gnu Glibc
2023-10-25 11:59:34
Exploit for Out-of-bounds Write in Gnu Glibc
2023-10-04 14:12:16
Exploit for Out-of-bounds Write in Gnu Glibc
2023-10-28 20:05:30
cisa_kev
cisa_kev
GNU C Library Buffer Overflow Vulnerability
2023-11-21 00:00:00
attackerkb
attackerkb
CVE-2023-4911
2023-10-03 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0286)
2023-10-12 00:00:00
Ubuntu: Security Advisory (USN-6409-1)
2023-10-04 00:00:00
Debian: Security Advisory (DSA-5514-1)
2023-10-04 00:00:00
wolfi
wolfi
CVE-2023-4911 vulnerabilities
2024-07-03 03:08:38
ubuntucve
ubuntucve
CVE-2023-4911
2023-10-03 00:00:00
prion
prion
Buffer overflow
2023-10-03 18:15:00
cgr
cgr
CVE-2023-4911 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
packetstorm
packetstorm
Glibc Tunables Privilege Escalation
2023-12-21 00:00:00
glibc ld.so Local Privilege Escalation
2023-10-06 00:00:00
debiancve
debiancve
CVE-2023-4911
2023-10-03 18:15:10
metasploit
metasploit
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
2023-12-14 23:28:43
qualysblog
qualysblog
hivepro
hivepro
Kinsing Exploits Looney Tunables Vulnerability to Breach Cloud Environments
2023-11-07 08:23:12
‘Looney Tunables’ Flaw Enables Local Privilege Escalation in Glibc
2023-10-05 10:18:37
f5
f5
K000137187 : GlibC vulnerability CVE-2023-4911
2023-10-09 00:00:00
cvelist
cvelist
kitploit
kitploit
cve
cve
CVE-2023-4911
2023-10-03 18:15:10
github
github
Cueing up a calculator: an introduction to exploit development on Linux
2023-12-06 17:30:42
ubuntu
ubuntu
GNU C Library vulnerabilities
2023-10-03 00:00:00
cloudfoundry
cloudfoundry
USN-6409-1: GNU C Library vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
thn
thn
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
2023-11-03 13:12:00
New Glibc Flaw Grants Attackers Root Access on Major Linux Distros
2024-01-31 05:44:00
debian
debian
[SECURITY] [DSA 5514-1] glibc security update
2023-10-03 17:26:13
fedora
fedora
[SECURITY] Fedora 37 Update: glibc-2.36-14.fc37
2023-10-04 15:49:21
[SECURITY] Fedora 38 Update: glibc-2.37-10.fc38
2023-10-04 15:52:08
[SECURITY] Fedora 39 Update: glibc-2.38-6.fc39
2023-10-04 17:16:19
rocky
rocky
glibc security update
2023-10-06 22:57:06
gentoo
gentoo
glibc: Multiple vulnerabilities
2023-10-04 00:00:00
almalinux
almalinux
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-12-22 16:32:56
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0110
2023-10-06 00:00:00
avleonov
avleonov
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.014 Low
EPSS
Percentile
86.5%
Related for MGASA-2023-0286