Vulnerability identifier: #VU81437

Vulnerability risk: Low

CVSSv3.1: 8.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:H/RL:U/RC:C]

CVE-ID: CVE-2023-4911

CWE-ID: CWE-119

Exploitation vector: Local

Exploits in database: 8

• June 28, 2024
  • CVE-2023-4911 (Looney Tunables Local privilege escalation (CVE-2023-4911) workshop) [Github]
• May 23, 2024
  • CVE-2023-4911 (CVE-2023-4911 proof of concept) [Github]
  • CVE-2023-4911 (CVE-2023-4911) [Github]
• April 26, 2024
  • looney-tunables-CVE-2023-4911 () [Github]
• March 22, 2024
  • CVE-2023-4911 (PoC for CVE-2023-4911) [Github]
• December 27, 2023
  • LooneyPwner (Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.) [Github]
• December 20, 2023
  • Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables) [Metasploit]
• October 8, 2023
  • POC_CVE4911 (PoC exploits are not meant to cause harm, but to show security weaknesses within software. Identifying issues allows companies to patch vulnerabilities and protect itself against attacks) [Github]

Impact: Code execution

Vulnerable software:
Glibc
Universal components / Libraries / Libraries used by multiple products

Vendor: GNU