Glibc: buffer overflow in ld.so leading to privilege escalation
CVSS score
7.8
EPSS probability
%63.8
Risk score
9.9
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser.
CVE-2023-4911 (Looney Tunables) analysis report and Docker reproduction lab
Repository containing a Proof of Concept (PoC) demonstrating the impact of CVE-2023-4911, a vulnerability in glibc's ld.so dynamic loader, exposing risks related to Looney Tunables.
Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit
Looney Tunables Local privilege escalation (CVE-2023-4911) workshop
http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html
http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2023/Oct/11
http://www.openwall.com/lists/oss-security/2023/10/03/2
Similar Vulnerabilities
Improper input validation in Apache Log4j
Improper access control in N/a
jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE
spring-cloud-function: Remote code execution by malicious Spring Expression
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
salt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-4911"