← Back to browse · API

CVE-2023-4911

Severity
HIGH
CVSS
7.8
EPSS
0.81422
Risk score
84.7
CISA KEV
Yes
PoC
No
Published
2023-11-21
Modified
2023-11-21
First seen
2026-08-07
Aliases
EUVD-2023-54750, GHSA-M77W-6VJW-WH2F
Products
GNU:GNU C Library, Red Hat:Red Hat Enterprise Linux 8 patch: 0:2.28-225.el8_8.6, Red Hat:Red Hat Enterprise Linux 8.6 Extended Update Support patch: 0:2.28-189.6.el8_6, Red Hat:Red Hat Enterprise Linux 9 patch: 0:2.34-60.el9_2.7, Red Hat:Red Hat Enterprise Linux 9.0 Extended Update Support patch: 0:2.34-28.el9_0.4, Red Hat:Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 patch: 0:2.28-189.6.el8_6, Red Hat:Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 patch: 0:4.5.3-10.el8ev, Red Hat:Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 patch: 0:4.5.3-202312060823_8.6
Sources
euvd EUVD-2023-54750
cisa.gov CVE-2023-4911

Description

GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

References