ZeroDay Findings
Sign inSign up

Findings

CVE-2023-4911

GNU C Library Buffer Overflow Vulnerability

Published Oct 3, 2023 · updated Jun 16, 2026 · netapp bootstrap os

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 3, 2023 · Catalog

    Detected

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

  2. Nov 21, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Dec 12, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Dec 12, 2023

Affected

  • cpe canonical/ubuntu linux22.04
  • cpe fedoraproject/fedora37
  • cpe fedoraproject/fedora38
  • cpe gnu/glibcversion unspecified
  • cpe netapp/bootstrap osversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe redhat/codeready linux builder9.0
  • cpe siemens/simatic s7-1500 cpu 1518-4 pn/dp mfp firmwareversion unspecified
  • cpe siemens/simatic s7-1500 cpu 1518f-4 pn/dp mfp firmwareversion unspecified
  • cpe siemens/simatic s7-1500 tm mfp firmwareversion unspecified
  • cpe siemens/siplus s7-1500 cpu 1518-4 pn/dp mfp firmwareversion unspecified
  • vendor GNU GNU C Libraryversion unspecified

Sources

  • CISA KEVCVE-2023-4911

    GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

    cisa.gov
  • CVE.orgCVE-2023-4911

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-4911

    30-day exploitation probability 63.8%

    first.org
  • Exploit Database52479

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_linux/local/glibc_tunables_priv_esc

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2023-4911

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permiss

    nvd.nist.gov

References

CVE-2023-4911 · ZeroDay Findings