A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Connections 60
has cited scope1 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Support2d806a63-9a71-4aeb-8c0b-b66a3d229410
has cited scope1 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 64f91b432-24c0-426d-9b8f-46bd7499e429
has cited scope2 retained · stored CVE-2023-4911 → Siemens · SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP797000c4-5d89-4a51-af16-392199bd5135c8dccd5b-5b94-49bb-a515-7a4ec894aaaa
has cited scope2 retained · stored CVE-2023-4911 → Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DP MFP23cf7c07-c74f-4fa6-a4fa-7e9e0bec8694ec619a42-cb8c-428d-8df9-561165d4993b
has cited scope1 retained · stored CVE-2023-4911 → source-scoped cited scope535f0de2-87b4-457c-b25b-c76d4338eadc
has cited scope1 retained · stored CVE-2023-4911 → Siemens · SIPLUS S7-1500 CPU 1518-4 PN/DP MFPdac668dd-7767-4ed7-87e4-552044ca4b5c
has cited scope2 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 9214b4d79-072c-48dd-9dd8-b222d603e96126eb16b8-06c6-4d4d-9348-92afdd062e2c
has cited scope2 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 754c92565-015e-47ad-8446-c5fca3a0f32962432e89-fa3d-4812-b93b-bb84cdc8e6aa
has cited scope1 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Supportcd66d97f-35af-484d-879f-58f84af8aca1
has cited scope3 retained · stored CVE-2023-4911 → Red Hat · Red Hat Virtualization 4 for Red Hat Enterprise Linux 878898975-76ff-4b3e-abd9-0267b8f23e76acf5a288-b460-43c8-bbc2-070d6708467ab5029af6-4b2c-4319-99c2-b8d4497a5262
has cited scope2 retained · stored CVE-2023-4911 → Red Hat · Red Hat Enterprise Linux 849c0b252-be77-4d6d-8b4f-dfa71bbb5be6570b37a8-1cbd-4b0b-aabf-c0e96cf48e42
has environmental constraint1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_tm_mfp27b19420-db8b-4de8-92b5-177c45ef3914
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · h410c17d6fdb8-f2e0-4eb6-bf62-e4a994b42539
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · h500s62ef95e2-9eca-4030-a67c-96e7062dd621
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · h300s88b2fb30-2753-49cb-9ded-a74890fb28c2
has environmental constraint1 retained · stored CVE-2023-4911 → siemens · siplus_s7-1500_cpu_1518-4_pn/dp_mfp9d436deb-fdb8-4432-87aa-9baf42d3e51a
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · hci_compute_nodef4808108-a270-43a7-886f-ace748201980
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · h410secb23389-1804-44f8-88de-5766edaa278d
has environmental constraint1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_cpu_1518-4_pn/dp_mfp5066d01b-b755-40f4-82aa-e59417d38044
has environmental constraint1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_cpu_1518f-4_pn/dp_mfp41d36199-16f0-4cfe-8a8e-91b457676621
has environmental constraint1 retained · stored CVE-2023-4911 → netapp · h700s86375eaf-47b3-43b4-a78c-9a297e99c499
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_power_little_endian_eusd85c629d-3435-40e0-97b5-6678d43f26fbed254f1b-c76e-4dcf-8d06-8d4aefc4c294f281da1e-f5a4-47ab-a5b3-70418f86869affe8bcc7-04e6-492a-a68d-fba0ccbdb77c
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_arm_64_eus0cf6c664-dbd2-4f45-9e37-cd7e346f418057992c59-df2c-4f27-8621-90c9b367850d5e5d50e6-e703-45cb-b955-27c7ec075c96d1705254-cb51-43af-9eda-a9a19830a8fe
has vulnerable target scope3 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_power_little_endian_eus8a1e1c21-90df-4b19-a2d7-b6ffcd0f71909c302745-340c-4062-bfdc-ada9d9c80584a9f422d9-e85c-41aa-8399-4d9cc36372fd
has vulnerable target scope3 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_ibm_z_systems_eus4c436bd3-b940-4e1d-80be-27199009d386ced4ca97-87ef-4aac-85e9-8f6b05dbc086df8ad3af-605b-40b7-9797-6b00fb5d737d
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · h700s_firmwaree0be0888-6d37-42a3-aae6-672923c75ccc
has vulnerable target scope2 retained · stored CVE-2023-4911 → debian · debian_linuxb96b75b8-f8aa-4ccd-b459-85a17d6d57f4d606dbe8-82eb-4279-ab5e-7783b3c26a76
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · h410c_firmware33235854-ada6-4099-92fd-5dc2c46b4778
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_arm6467ae1376-81f4-48f4-8e3f-182e3e226502
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_arm_64dcf657b1-a4d4-4717-8237-2d7dab3b7184
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder2615846f-08f0-488c-84ab-70a24a38d180
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · virtualization_hoste89eb08c-bb3f-4777-b828-baf35ac9f2c1
has vulnerable target scope1 retained · stored CVE-2023-4911 → siemens · siplus_s7-1500_cpu_1518-4_pn/dp_mfp_firmwaree0d1330f-bba9-4e50-99a0-22d49a0cdb80
has vulnerable target scope1 retained · stored CVE-2023-4911 → gnu · glibc2a074c59-00f2-4580-a05e-23fee53c6b8a
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · enterprise_linux_server_aus0b5020cb-767a-4931-ae44-6538ed578d90c3b42a83-0911-48f5-b0ef-67162150a2bcd5962bcd-319a-403b-b22f-f1b9c922ccfbf8cdf8e4-38fb-42db-90b9-f303fce514d7
has vulnerable target scope3 retained · stored CVE-2023-4911 → redhat · enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions397e5f45-370d-475b-a36c-72776db5962a601cfed0-833e-4680-af25-3bd0ef26e7e4dde9b20c-43c3-4d26-9580-4abb2a67c273
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_ibm_z_systems3ed55a38-03c7-4973-93f7-aa392d99b3f8
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_ibm_z_systems_eus_s390x44fcad13-929c-40f5-b43e-09db323dda5f
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_eus1ffc3223-bc64-45e2-95f2-6e8f607c632124fdbf0b-d761-4332-a87c-7543f54c4e6a5563ac78-4e01-48fb-bae0-6c28f30bb202d34fa27d-9ff7-4e12-997c-2b4dac48a436
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · enterprise_linux_eus07d18aa4-762a-481f-9035-6a1deb7cc78f78c2bcbc-b60d-41eb-8d21-76875ce855407982270d-bb85-40e1-a811-f3f23313fa15ce8db6c7-852e-42d6-8a2a-807f249e2ee6
has vulnerable target scope2 retained · stored CVE-2023-4911 → canonical · ubuntu_linux38ebff26-add6-4dba-8632-825397f08cfd40db11f4-cb76-4cc1-974f-56480b57fd40
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · ontap_select_deploy_administration_utilityb503cd08-a657-4162-bc59-7f5c9bb73a48
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_arm64_eus18a9df61-9275-443e-907e-057b88ef4eb821817e6f-df52-46be-8162-08c956905a8dd59c0b2c-2946-4b99-bf96-a781e2e5e945e120f4db-f680-4429-a525-224010fff9a6
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · h300s_firmware8c54f60c-2abf-48c9-87f1-29c418c37ad7
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · virtualization971895cc-9e8c-4952-8fb6-954c740bf5b9
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_server_tus6c40d3a4-3228-4d05-b227-76be96e277dc
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_power_big_endian_eus5b5adfe1-e2fc-4368-b257-63d996bb23aa
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · h410s_firmwareac90dd51-840a-43fb-b2d4-c8b57bf14042
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · bootstrap_osca29e573-cfff-43e9-8fd3-fd3e1572334e
has vulnerable target scope3 retained · stored CVE-2023-4911 → fedoraproject · fedora49ead562-5703-4725-9428-e2cba126b69561804efe-98c5-491f-8d6f-a019d2fabcf08961dccf-9ac1-4c9e-8551-90d69e59072e
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_power_little_endian95452874-3056-4911-8f81-b042c7c5e853
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_power_little_endiand790c6eb-6b32-4811-9a3e-163a09d96bee
has vulnerable target scope1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmwaree4b086ca-423f-46cd-9cae-1254a9f64fb7
has vulnerable target scope3 retained · stored CVE-2023-4911 → redhat · enterprise_linux_update_services_for_sap_solutions5e630a73-cb70-4a8e-9200-b6ccb72b2731a2a23f0e-7e0e-40e6-b532-b297776f1764f66fc9b8-5f70-4d6c-80e5-b0b50f8478fc
has vulnerable target scope2 retained · stored CVE-2023-4911 → redhat · enterprise_linux384dc986-9068-4dbd-a4d5-023f54d3673def00a4fc-e374-4356-baac-f998340bcaed
has vulnerable target scope1 retained · stored CVE-2023-4911 → netapp · h500s_firmware7b111608-b2b0-48d0-bd9e-c9a6999bf069
has vulnerable target scope4 retained · stored CVE-2023-4911 → redhat · codeready_linux_builder_for_ibm_z_systems_eus3ce19af2-6017-49e0-b477-84e8b9b7bcfc7df0592e-f915-4a0e-9453-4b92128063bea42c9555-27cc-4657-83b4-6ca7eb3f8d02f3b8ca96-26a6-4545-9b5f-e6a91bf83aff
has vulnerable target scope1 retained · stored CVE-2023-4911 → redhat · enterprise_linux_for_ibm_z_systems350c45a5-4321-491b-a608-ef0b37972245
has vulnerable target scope1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_tm_mfp_firmwarec86827ef-aa9b-45cb-8291-9bd16d09c4d0
has vulnerable target scope1 retained · stored CVE-2023-4911 → siemens · simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmwarebd0f444a-6e3c-4ab9-887d-129a2dc5b5ec