CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability. GNU C
GNU C Library Buffer Overflow Vulnerability. GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- CISA KEV-listed (remediation due 2023-12-12)
- EPSS 65.0% (98.5% percentile)