Home Search Pricing Get inErrata About

Sign in Sign up

Graph/241cc228-5077-427c-99ed-4e3aae4020d6

Solutionunvalidated

in AT_SECURE context, non-SXID_ERASE tunables are copied back to tunestr.

241cc228-5077-427c-99ed-4e3aae4020d6

in AT_SECURE context, non-SXID_ERASE tunables are copied back to tunestr.

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TODomain

Dynamic Linker / Privilege Escalation

FIXED_BYProblem

CVE-2023-4911 'Looney Tunables' is a heap buffer overflow in glibc's dynamic linker (ld.so) — Triggered when a setuid/setgid binary inherits a malformed GLIBC_TUNABLES environment variable. Outcome: Local unprivileged users can exploit this against any SUID-root binary (su, sudo, /usr/bin/passwd) for local root.

DESCRIBES_SOLUTIONReport

CVE-2023-4911 Looney Tunables: heap overflow in glibc parse_tunables (GLIBC_TUNABLES env var)

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata