CVE
CVE-2023-4911
- First Reported
- Aug 28, 2026
- Latest Reported
- Aug 28, 2026
CVE Enrichment
- CVSS
- 7.8 HIGH
- EPSS
- 63.77%
- EPSS Percentile
- 99.22%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 04-Oct-2023 01:15
- Last Modified
- 15-Oct-2026 05:17
- EPSS Date
- 2026-10-24
- CWE
- CWE-122, CWE-787
CVSS Vector
CVSS:3.1 AV:L /
AC:L /
PR:L /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2023-11-21
- Remediation Due
- 2023-12-12
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Notes
- This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514 ; https://nvd.nist.gov/vuln/detail/CVE-2023-4911
Affected Products / Versions
- netapp / bootstrap_os
Version / affected range: -
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* - siemens / simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* - siemens / simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* - siemens / siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
Version / affected range: * · from (inclusive) 3.1.5
cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* - siemens / simatic_s7-1500_tm_mfp_firmware
Version / affected range: * · before (exclusive) 1.1
cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:*:*:*:*:*:*:*:* - gnu / glibc
Version / affected range: * · from (inclusive) 2.34 · before (exclusive) 2.39
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 37
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 38
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 39
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* - redhat / codeready_linux_builder
Version / affected range: 9.0
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* - redhat / codeready_linux_builder_eus
Version / affected range: 8.6
cpe:2.3:a:redhat:codeready_linux_builder_eus:8.6:*:*:*:*:*:*:* - redhat / codeready_linux_builder_eus
Version / affected range: 9.2
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.2:*:*:*:*:*:*:* - redhat / codeready_linux_builder_eus
Version / affected range: 9.4
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.4:*:*:*:*:*:*:* - redhat / codeready_linux_builder_eus
Version / affected range: 9.6
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_arm64
Version / affected range: 9.0_aarch64
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_arm64_eus
Version / affected range: 8.6
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.6:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_arm64_eus
Version / affected range: 9.2_aarch64
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_arm64_eus
Version / affected range: 9.4_aarch64
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_arm64_eus
Version / affected range: 9.6_aarch64
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.6_aarch64:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_ibm_z_systems
Version / affected range: 9.0_s390x
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_ibm_z_systems_eus
Version / affected range: 8.6
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.6:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_ibm_z_systems_eus
Version / affected range: 9.2_s390x
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_ibm_z_systems_eus
Version / affected range: 9.4_s390x
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_ibm_z_systems_eus
Version / affected range: 9.6_s390x
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_power_little_endian
Version / affected range: 9.0_ppc64le
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_power_little_endian_eus
Version / affected range: 8.6
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.6:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_power_little_endian_eus
Version / affected range: 9.2_ppc64le
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_power_little_endian_eus
Version / affected range: 9.4_ppc64le
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* - redhat / codeready_linux_builder_for_power_little_endian_eus
Version / affected range: 9.6_ppc64le
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* - redhat / virtualization
Version / affected range: 4.0
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* - redhat / virtualization_host
Version / affected range: 4.0
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:* - redhat / enterprise_linux
Version / affected range: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* - redhat / enterprise_linux
Version / affected range: 9.0
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* - redhat / enterprise_linux_eus
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_eus
Version / affected range: 9.2
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* - redhat / enterprise_linux_eus
Version / affected range: 9.4
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* - redhat / enterprise_linux_eus
Version / affected range: 9.6
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64
Version / affected range: 9.0_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64_eus
Version / affected range: 8.6_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64_eus
Version / affected range: 9.2_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.2_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64_eus
Version / affected range: 9.4_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64_eus
Version / affected range: 9.6_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems
Version / affected range: 9.0_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems_eus
Version / affected range: 9.2_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems_eus
Version / affected range: 9.4_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems_eus
Version / affected range: 9.6_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems_eus_s390x
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus_s390x:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_for_power_big_endian_eus
Version / affected range: 8.6_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_for_power_little_endian
Version / affected range: 9.0_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_for_power_little_endian_eus
Version / affected range: 9.2_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_for_power_little_endian_eus
Version / affected range: 9.4_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_for_power_little_endian_eus
Version / affected range: 9.6_ppc64le
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_server_aus
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_server_aus
Version / affected range: 9.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* - redhat / enterprise_linux_server_aus
Version / affected range: 9.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* - redhat / enterprise_linux_server_aus
Version / affected range: 9.6
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* - redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
Version / affected range: 9.2_ppc64le
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
Version / affected range: 9.4_ppc64le
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
Version / affected range: 9.6_ppc64le
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:* - redhat / enterprise_linux_server_tus
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_update_services_for_sap_solutions
Version / affected range: 9.2
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* - redhat / enterprise_linux_update_services_for_sap_solutions
Version / affected range: 9.4
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* - redhat / enterprise_linux_update_services_for_sap_solutions
Version / affected range: 9.6
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:* - canonical / ubuntu_linux
Version / affected range: 22.04
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* - canonical / ubuntu_linux
Version / affected range: 23.04
cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* - netapp / h410c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* - netapp / h300s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* - netapp / h500s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* - netapp / h700s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* - netapp / h410s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* - netapp / ontap_select_deploy_administration_utility
Version / affected range: -
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- For example, CVE-2023-4911 ("Looney Tunables") was a local privilege-escalation flaw in glibc's dynamic loader, a component sitting in the base layer of nearly every mainstream Linux image. glibc came with the distro How to Secure Docker Images with Hardening and Continuous Patching
Vendors (1)
Products (5)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.