Actively exploited · Published Oct 3, 2023 · Assigned by redhat
CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation
High 7.8 Exploited
In plain English
A high-severity heap buffer overflow in glibc. Attackers are actively exploiting it in the wild (listed by CISA on November 21, 2023). The chance it is exploited in the next 30 days is estimated at 63.8% (higher than 99.2% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)63.8%top 0.8% of all CVEs
Exploited in the wildYesCISA KEV since Nov 21, 2023
Attack tooling2Metasploit, Public PoC
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Dec 12, 2023.
Official description
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | compat-libpthread-nonshared | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:8 | glibc | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-all-langpacks | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-all-langpacks | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-benchtests | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-benchtests | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-common | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-common | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-devel | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-devel | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-doc | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-doc | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-gconv-extra | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-gconv-extra | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-headers | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-headers | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-aa | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-aa | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-af | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-af | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-agr | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-agr | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ak | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ak | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-am | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-am | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-an | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-an | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-anp | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-anp | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ar | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ar | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-as | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-as | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ast | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ast | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ayc | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ayc | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-az | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-az | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-be | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-be | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bem | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bem | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ber | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ber | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bg | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bg | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bhb | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bhb | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bho | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bho | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bi | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bi | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bn | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bn | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bo | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bo | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-br | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-br | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-brx | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-brx | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-bs | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-bs | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-byn | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-byn | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ca | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ca | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ce | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ce | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-chr | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-chr | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:9 | glibc-langpack-ckb | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-cmn | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-cmn | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-crh | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-crh | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-cs | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-cs | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-csb | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-csb | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-cv | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-cv | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-cy | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-cy | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-da | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-da | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-de | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-de | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-doi | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-doi | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-dsb | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-dsb | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-dv | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-dv | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-dz | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-dz | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-el | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-el | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-en | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-en | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-eo | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-eo | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-es | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-es | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-et | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-et | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-eu | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-eu | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fa | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fa | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ff | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ff | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fi | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fi | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fil | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fil | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fo | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fo | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fr | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fr | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fur | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fur | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-fy | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-fy | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ga | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ga | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-gd | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-gd | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-gez | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-gez | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-gl | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-gl | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-gu | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-gu | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-gv | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-gv | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ha | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ha | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hak | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hak | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-he | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-he | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hi | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hi | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hif | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hif | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hne | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hne | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hr | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hr | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hsb | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hsb | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ht | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ht | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hu | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hu | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-hy | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-hy | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ia | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ia | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-id | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-id | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ig | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ig | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ik | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ik | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-is | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-is | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-it | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-it | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-iu | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-iu | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ja | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ja | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ka | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ka | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kab | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kab | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kk | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kk | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kl | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kl | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-km | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-km | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kn | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kn | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ko | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ko | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kok | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kok | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ks | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ks | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ku | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ku | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-kw | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-kw | 2.34-60.el9_2.7 | ALSA-2023:5453 |
| AlmaLinux:8 | glibc-langpack-ky | 2.28-225.el8_8.6 | ALSA-2023:5455 |
| AlmaLinux:9 | glibc-langpack-ky | 2.34-60.el9_2.7 | ALSA-2023:5453 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| glibc | 2.34 – before 2.39 | |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | see references |
| Red Hat | Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHSA-2023:5453 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:5454 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:5455 vendor-advisory, x_refsource_REDHAT
- RHSA-2023:5476 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0033 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-4911 vdb-entry, x_refsource_REDHAT
- RHBZ#2238352 issue-tracking, x_refsource_REDHAT
- https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
- https://www.qualys.com/cve-2023-4911/
- https://www.exploit-db.com/exploits/52479
- http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html x_transferred
- http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html x_transferred
- http://seclists.org/fulldisclosure/2023/Oct/11 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/03/2 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/03/3 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/05/1 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/13/11 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/14/3 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/14/5 x_transferred
- http://www.openwall.com/lists/oss-security/2023/10/14/6 x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/ x_transferred
- https://security.gentoo.org/glsa/202310-03 x_transferred
- https://security.netapp.com/advisory/ntap-20231013-0006/ x_transferred
- https://www.debian.org/security/2023/dsa-5514 x_transferred
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911 government-resource
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html