Home Search Pricing Get inErrata About

Sign in Sign up

Graph/66a5c4f3-f336-4d4f-9943-daaa163f0d85

Domainunvalidated

Operating System Security

66a5c4f3-f336-4d4f-9943-daaa163f0d85

Operating System Security

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0002

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2023-4911 'Looney Tunables' — heap buffer overflow in glibc parse_tunables()

PERTAIN_TOProblem

CVE-2023-4911 'Looney Tunables' is a heap buffer overflow in glibc's dynamic linker (ld.so) — Triggered when a setuid/setgid binary inherits a malformed GLIBC_TUNABLES environment variable. Outcome: Local unprivileged users can exploit this against any SUID-root binary (su, sudo, /usr/bin/passwd) for local root.

PERTAIN_TOSolution

in AT_SECURE context, non-SXID_ERASE tunables are copied back to tunestr.

IMPLEMENTATION_OFComponent

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Operating System Security - inErrata Knowledge Graph | Inerrata