{"cve_id":"CVE-2023-4911","published":"2023-10-03T18:15:10.463000+00:00","last_modified":"2026-10-14T22:17:18.373000+00:00","vuln_status":"Analyzed","description":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-122","CWE-787"],"in_kev":true,"kev_date_added":"2023-11-21","kev_ransomware":false,"epss_score":0.63769,"epss_percentile":0.99221,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-28T03:20:23.581518+00:00","first_seen":"2023-10-03T18:15:10.463000+00:00","kev_first_seen":"2023-11-21T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","debian","fedoraproject","gnu","netapp","redhat","siemens"],"products":["bootstrap_os","codeready_linux_builder","codeready_linux_builder_eus","codeready_linux_builder_for_arm64","codeready_linux_builder_for_arm64_eus","codeready_linux_builder_for_ibm_z_systems","codeready_linux_builder_for_ibm_z_systems_eus","codeready_linux_builder_for_power_little_endian","codeready_linux_builder_for_power_little_endian_eus","debian_linux","enterprise_linux","enterprise_linux_eus","enterprise_linux_for_arm_64","enterprise_linux_for_arm_64_eus","enterprise_linux_for_ibm_z_systems","enterprise_linux_for_ibm_z_systems_eus","enterprise_linux_for_ibm_z_systems_eus_s390x","enterprise_linux_for_power_big_endian_eus","enterprise_linux_for_power_little_endian","enterprise_linux_for_power_little_endian_eus","enterprise_linux_server_aus","enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions","enterprise_linux_server_tus","enterprise_linux_update_services_for_sap_solutions","fedora","glibc","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500s","h500s_firmware","h700s","h700s_firmware","hci_compute_node","ontap_select_deploy_administration_utility","simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp","simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp","simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware","simatic_s7-1500_tm_mfp","simatic_s7-1500_tm_mfp_firmware","siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp","siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ubuntu_linux","virtualization","virtualization_host"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["22.04","23.04"]},{"vendor":"debian","product":"debian_linux","ranges":["11.0","12.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["39","38","37"]},{"vendor":"gnu","product":"glibc","ranges":["≥ 2.34 and < 2.39"]},{"vendor":"netapp","product":"bootstrap_os","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility","ranges":["all versions"]},{"vendor":"redhat","product":"codeready_linux_builder","ranges":["9.0"]},{"vendor":"redhat","product":"codeready_linux_builder_eus","ranges":["9.2","8.6","9.6","9.4"]},{"vendor":"redhat","product":"codeready_linux_builder_for_arm64","ranges":["9.0_aarch64"]},{"vendor":"redhat","product":"codeready_linux_builder_for_arm64_eus","ranges":["8.6","9.4_aarch64","9.6_aarch64","9.2_aarch64"]},{"vendor":"redhat","product":"codeready_linux_builder_for_ibm_z_systems","ranges":["9.0_s390x"]},{"vendor":"redhat","product":"codeready_linux_builder_for_ibm_z_systems_eus","ranges":["9.2_s390x","9.4_s390x","9.6_s390x","8.6"]},{"vendor":"redhat","product":"codeready_linux_builder_for_power_little_endian","ranges":["9.0_ppc64le"]},{"vendor":"redhat","product":"codeready_linux_builder_for_power_little_endian_eus","ranges":["9.2_ppc64le","9.4_ppc64le","9.6_ppc64le","8.6"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["9.0","8.0"]},{"vendor":"redhat","product":"enterprise_linux_eus","ranges":["9.6","9.2","8.6","9.4"]},{"vendor":"redhat","product":"enterprise_linux_for_arm_64","ranges":["9.0_aarch64"]},{"vendor":"redhat","product":"enterprise_linux_for_arm_64_eus","ranges":["9.6_aarch64","8.6_aarch64","9.2_aarch64","9.4_aarch64"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems","ranges":["9.0_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus","ranges":["9.2_s390x","9.4_s390x","9.6_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus_s390x","ranges":["8.6"]},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian_eus","ranges":["8.6_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian","ranges":["9.0_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus","ranges":["9.2_ppc64le","9.4_ppc64le","9.6_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_server_aus","ranges":["9.2","9.4","9.6","8.6"]},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions","ranges":["9.6_ppc64le","9.4_ppc64le","9.2_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_server_tus","ranges":["8.6"]},{"vendor":"redhat","product":"enterprise_linux_update_services_for_sap_solutions","ranges":["9.4","9.6","9.2"]},{"vendor":"redhat","product":"virtualization","ranges":["4.0"]},{"vendor":"redhat","product":"virtualization_host","ranges":["4.0"]},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]},{"vendor":"siemens","product":"simatic_s7-1500_tm_mfp_firmware","ranges":["< 1.1"]},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]}]}