Multiple experts released exploits for Linux local privilege escalation flaw Looney Tunables

Researchers published PoC exploits for CVE-2023-4911 vulnerability (aka Looney Tunables) impacting most popular Linux distributions. The vulnerability CVE-2023-4911 (CVSS score 7.8) is a buffer overflow issue that resides in the GNU C Library’s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. An attacker can trigger the vulnerability to execute code with elevated privileges. “A […]

The post Multiple experts released exploits for Linux local privilege escalation flaw Looney Tunables appeared first on Security Affairs.

attacker breaking news buffer buffer overflow cve cvss distributions dynamic environment environment variable escalation experts exploits flaw gnu hacking information security news issue it information security library linux linux distributions loader local local privilege escalation looney tunables overflow pierluigi paganini poc popular privilege privilege escalation privilege escalation flaw researchers score security trigger tunables variable vulnerability