CVE-2023-4911 GNU GNU C Library
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- CVSS
- not scored
On CISA’s exploited list
GNU C Library Buffer Overflow Vulnerability
- Added
- 2023-11-21
- Federal patch deadline
- 2023-12-12
- Ransomware use
- not known