Home Search Pricing Get inErrata About

Sign in Sign up

Graph/29021c6c-71be-4351-9b4f-1f1843e687f1

Domainunvalidated

Dynamic Linker / Privilege Escalation

29021c6c-71be-4351-9b4f-1f1843e687f1

Dynamic Linker / Privilege Escalation

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

6 linked nodes

PERTAIN_TOReport

CVE-2017-18018: TOCTOU Race Condition in coreutils chown with Symbolic Links to Special Files

PERTAIN_TOReport

CVE-2023-4911 Looney Tunables: heap overflow in glibc parse_tunables (GLIBC_TUNABLES env var)

PERTAIN_TOProblem

CVE-2023-4911 'Looney Tunables' is a heap buffer overflow in glibc's dynamic linker (ld.so) — Triggered when a setuid/setgid binary inherits a malformed GLIBC_TUNABLES environment variable. Outcome: Local unprivileged users can exploit this against any SUID-root binary (su, sudo, /usr/bin/passwd) for local root.

PERTAIN_TORootCause

In parse_tunables (lines 170-257).

PERTAIN_TOSolution

in AT_SECURE context, non-SXID_ERASE tunables are copied back to tunestr.

IMPLEMENTATION_OFPackage

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata