Buffer overflow in GNU C Library (glibc) - CVE-2023-4911

Vulnerability identifier: #VU81437

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4911

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of GLIBC_TUNABLES environment variable. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

GNU C Library (glibc)
Oracle Linux
Debian Linux
Amazon Linux AMI
Gentoo Linux
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
openEuler
Ubuntu
Fedora
My Cloud OS 5
My Cloud (P/N: WDBCTLxxxxxx-10)
My Cloud DL4100
My Cloud EX2100
My Cloud Mirror Gen 2
My Cloud EX4100
My Cloud EX2 Ultra
My Cloud PR4100
My Cloud PR2100
Cost Management
Migration Toolkit for Runtimes
Service Interconnect
Fence Agents Remediation Operator
Run Once Duration Override Operator for Red Hat OpenShift
Data Lakehouse
Red Hat OpenShift Kernel Module Management
OpenShift Pipelines
cert-manager Operator for Red Hat OpenShift
Cryostat
Ansible Automation Platform
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
IBM MQ Operator
IBM Cloud Transformation Advisor
IBM Cloud Object Storage Systems
IBM Elastic Storage System
IBM Security Verify Governance
IBM Robotic Process Automation
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
Node Maintenance Operator
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift API for Data Protection (OADP)
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Edge Application Manager
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
Storage Ceph
IBM supplied MQ Advanced container images
Robotic Process Automation for Cloud Pak
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
glibc (Red Hat package)
glibc-langpack-dz
glibc-langpack-gez
glibc-langpack-gl
glibc-langpack-gu
glibc-langpack-gd
glibc-langpack-gv
glibc-langpack-ha
glibc-langpack-hak
glibc-langpack-he
glibc-langpack-hi
glibc-langpack-hif
glibc-langpack-hne
glibc-langpack-hr
glibc-langpack-el
glibc-langpack-en
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-eo
glibc-langpack-es
glibc-langpack-et
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-doi
glibc-langpack-eu
glibc-langpack-az
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-bo
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-an
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-crh
glibc-langpack-dsb
glibc-langpack-kn
glibc-langpack-de
glibc-langpack-da
glibc-langpack-cy
glibc-langpack-cv
glibc-langpack-csb
glibc-langpack-cs
glibc-langpack-dv
glibc-langpack-cmn
glibc-langpack-chr
glibc-langpack-ce
glibc-langpack-ca
glibc-langpack-byn
glibc-langpack-bs
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-mk
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-mn
glibc-langpack-ml
glibc-langpack-nb
glibc-langpack-mjw
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-nso
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-or
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-mag
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-is
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-sah
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-ko
glibc-langpack-kok
glibc-langpack-ks
glibc-langpack-ku
glibc-langpack-kw
glibc-langpack-ky
glibc-langpack-lb
glibc-langpack-lg
glibc-langpack-li
glibc-langpack-lij
glibc-langpack-ln
glibc-langpack-lo
glibc-langpack-lt
glibc-langpack-lv
glibc-langpack-lzh
glibc-langpack-to
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-vi
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-zu
glibc-doc
nss_hesiod
nss_db
nscd
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-af
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-sm
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-se
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-shs
glibc-langpack-si
glibc-langpack-sid
glibc-langpack-sk
glibc-langpack-sl
glibc-langpack-agr
glibc-langpack-so
glibc-langpack-sq
glibc-langpack-sr
glibc-langpack-ss
glibc-langpack-st
glibc-langpack-sv
glibc-langpack-sw
glibc-langpack-szl
glibc-langpack-ta
compat-libpthread-nonshared
glibc-langpack-aa
glibc-headers
glibc-gconv-extra
glibc-devel
glibc-common
glibc-benchtests
glibc-all-langpacks
glibc
glibc-langpack-sat
glibc-langpack-pt
glibc-langpack-quz
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-ru
glibc-langpack-rw
glibc-langpack-sa
glibc (Debian package)
glibc-help
glibc-locale-archive
glibc-debuginfo
glibc-compat-2.17
glibc-debugutils
glibc-debugsource
nss_modules
libc6 (Ubuntu package)
sys-libs/glibc
redhat-release-virtualization-host (Red Hat package)
rhel-- (Red Hat package)
Oracle Communications Cloud Native Core Security Edge Protection Proxy
IBM Cloud Pak System
My Cloud Home Duo
My Cloud Home

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Migration Toolkit for Runtimes - update to 1.2.1
Fence Agents Remediation Operator - update to 0.2.1
Node Health Check Operator - addressed in versions 0.4.1, 0.6.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Red Hat OpenShift Serverless - update to 1.30.2
Data Lakehouse - update to 1.1.0.0
OpenShift API for Data Protection (OADP) - update to 1.0.14
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - addressed in versions 1.1.3, 1.2.0
Red Hat OpenShift Kernel Module Management - update to 1.1.2
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.1
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2, 1.12.1
cert-manager Operator for Red Hat OpenShift - update to 1.12.1
Multicluster Engine for Kubernetes - addressed in versions 2.1.9, 2.2.9, 2.3.3
OpenShift Service Mesh - addressed in versions 2.2.11, 2.3.8, 2.4.4
Migration Toolkit for Virtualization - addressed in versions 2.4.3, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.8, 2.7.9, 2.8.3
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.7, 4.0.5, 4.1.4, 4.2.2
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.13.5
Red Hat OpenShift Container Platform - addressed in versions 4.11.52, 4.12.39, 4.12.41, 4.13.17, 4.14.0
Node Maintenance Operator - addressed in versions 5.0.1, 5.2.1
OpenShift Logging - addressed in versions 5.5.17, 5.6.12, 5.7.7
Red Hat Migration Toolkit for Applications - addressed in versions 6.1.4, 6.2.1
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4 SP1
IBM Business Automation Manager Open Editions - update to 8.0.4 IF001
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
IBM MQ Operator - addressed in versions 2.0.16, 2.4.4
IBM Cloud Pak System - update to 2.3.4.0
Cloud Pak for Network Automation - update to 2.6.4
glibc (Red Hat package) - addressed in versions 2.28-189.6.el8_6, 2.28-225.el8_8.6, 2.34-28.el9_0.4, 2.34-60.el9_2.7
glibc-langpack-dz - update to 2.28-225.0.4
glibc-langpack-gez - update to 2.28-225.0.4
glibc-langpack-gl - update to 2.28-225.0.4
glibc-langpack-gu - update to 2.28-225.0.4
glibc-langpack-gd - update to 2.28-225.0.4
glibc-langpack-gv - update to 2.28-225.0.4
glibc-langpack-ha - update to 2.28-225.0.4
glibc-langpack-hak - update to 2.28-225.0.4
glibc-langpack-he - update to 2.28-225.0.4
glibc-langpack-hi - update to 2.28-225.0.4
glibc-langpack-hif - update to 2.28-225.0.4
glibc-langpack-hne - update to 2.28-225.0.4
glibc-langpack-hr - update to 2.28-225.0.4
glibc-langpack-el - update to 2.28-225.0.4
glibc-langpack-en - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-ga - update to 2.28-225.0.4
glibc-langpack-fy - update to 2.28-225.0.4
glibc-langpack-fur - update to 2.28-225.0.4
glibc-langpack-fr - update to 2.28-225.0.4
glibc-langpack-fo - update to 2.28-225.0.4
glibc-langpack-fil - update to 2.28-225.0.4
glibc-langpack-fi - update to 2.28-225.0.4
glibc-langpack-eo - update to 2.28-225.0.4
glibc-langpack-es - update to 2.28-225.0.4
glibc-langpack-et - update to 2.28-225.0.4
glibc-langpack-ff - update to 2.28-225.0.4
glibc-langpack-fa - update to 2.28-225.0.4
glibc-langpack-doi - update to 2.28-225.0.4
glibc-langpack-eu - update to 2.28-225.0.4
glibc-langpack-az - update to 2.28-225.0.4
glibc-langpack-bn - update to 2.28-225.0.4
glibc-langpack-bi - update to 2.28-225.0.4
glibc-langpack-bho - update to 2.28-225.0.4
glibc-langpack-bhb - update to 2.28-225.0.4
glibc-langpack-bg - update to 2.28-225.0.4
glibc-langpack-ber - update to 2.28-225.0.4
glibc-langpack-bem - update to 2.28-225.0.4
glibc-langpack-be - update to 2.28-225.0.4
glibc-langpack-bo - update to 2.28-225.0.4
glibc-langpack-ayc - update to 2.28-225.0.4
glibc-langpack-ast - update to 2.28-225.0.4
glibc-langpack-as - update to 2.28-225.0.4
glibc-langpack-ar - update to 2.28-225.0.4
glibc-langpack-anp - update to 2.28-225.0.4
glibc-langpack-an - update to 2.28-225.0.4
glibc-langpack-am - update to 2.28-225.0.4
glibc-langpack-ak - update to 2.28-225.0.4
glibc-langpack-crh - update to 2.28-225.0.4
glibc-langpack-dsb - update to 2.28-225.0.4
glibc-langpack-kn - update to 2.28-225.0.4
glibc-langpack-de - update to 2.28-225.0.4
glibc-langpack-da - update to 2.28-225.0.4
glibc-langpack-cy - update to 2.28-225.0.4
glibc-langpack-cv - update to 2.28-225.0.4
glibc-langpack-csb - update to 2.28-225.0.4
glibc-langpack-cs - update to 2.28-225.0.4
glibc-langpack-dv - update to 2.28-225.0.4
glibc-langpack-cmn - update to 2.28-225.0.4
glibc-langpack-chr - update to 2.28-225.0.4
glibc-langpack-ce - update to 2.28-225.0.4
glibc-langpack-ca - update to 2.28-225.0.4
glibc-langpack-byn - update to 2.28-225.0.4
glibc-langpack-bs - update to 2.28-225.0.4
glibc-langpack-brx - update to 2.28-225.0.4
glibc-langpack-br - update to 2.28-225.0.4
glibc-langpack-mk - update to 2.28-225.0.4
glibc-langpack-nan - update to 2.28-225.0.4
glibc-langpack-my - update to 2.28-225.0.4
glibc-langpack-mt - update to 2.28-225.0.4
glibc-langpack-ms - update to 2.28-225.0.4
glibc-langpack-mr - update to 2.28-225.0.4
glibc-langpack-mni - update to 2.28-225.0.4
glibc-langpack-mn - update to 2.28-225.0.4
glibc-langpack-ml - update to 2.28-225.0.4
glibc-langpack-nb - update to 2.28-225.0.4
glibc-langpack-mjw - update to 2.28-225.0.4
glibc-langpack-miq - update to 2.28-225.0.4
glibc-langpack-mi - update to 2.28-225.0.4
glibc-langpack-mhr - update to 2.28-225.0.4
glibc-langpack-mg - update to 2.28-225.0.4
glibc-langpack-mfe - update to 2.28-225.0.4
glibc-langpack-mai - update to 2.28-225.0.4
glibc-langpack-nso - update to 2.28-225.0.4
glibc-langpack-ps - update to 2.28-225.0.4
glibc-langpack-pl - update to 2.28-225.0.4
glibc-langpack-pap - update to 2.28-225.0.4
glibc-langpack-pa - update to 2.28-225.0.4
glibc-langpack-os - update to 2.28-225.0.4
glibc-langpack-or - update to 2.28-225.0.4
glibc-langpack-om - update to 2.28-225.0.4
glibc-langpack-oc - update to 2.28-225.0.4
glibc-langpack-mag - update to 2.28-225.0.4
glibc-langpack-nr - update to 2.28-225.0.4
glibc-langpack-nn - update to 2.28-225.0.4
glibc-langpack-nl - update to 2.28-225.0.4
glibc-langpack-niu - update to 2.28-225.0.4
glibc-langpack-nhn - update to 2.28-225.0.4
glibc-langpack-ne - update to 2.28-225.0.4
glibc-langpack-nds - update to 2.28-225.0.4
glibc-langpack-is - update to 2.28-225.0.4
glibc-langpack-km - update to 2.28-225.0.4
glibc-langpack-kl - update to 2.28-225.0.4
glibc-langpack-kk - update to 2.28-225.0.4
glibc-langpack-kab - update to 2.28-225.0.4
glibc-langpack-ka - update to 2.28-225.0.4
glibc-langpack-ja - update to 2.28-225.0.4
glibc-langpack-iu - update to 2.28-225.0.4
glibc-langpack-it - update to 2.28-225.0.4
glibc-langpack-sah - update to 2.28-225.0.4
glibc-langpack-ik - update to 2.28-225.0.4
glibc-langpack-ig - update to 2.28-225.0.4
glibc-langpack-id - update to 2.28-225.0.4
glibc-langpack-ia - update to 2.28-225.0.4
glibc-langpack-hy - update to 2.28-225.0.4
glibc-langpack-hu - update to 2.28-225.0.4
glibc-langpack-ht - update to 2.28-225.0.4
glibc-langpack-hsb - update to 2.28-225.0.4
glibc-langpack-ko - update to 2.28-225.0.4
glibc-langpack-kok - update to 2.28-225.0.4
glibc-langpack-ks - update to 2.28-225.0.4
glibc-langpack-ku - update to 2.28-225.0.4
glibc-langpack-kw - update to 2.28-225.0.4
glibc-langpack-ky - update to 2.28-225.0.4
glibc-langpack-lb - update to 2.28-225.0.4
glibc-langpack-lg - update to 2.28-225.0.4
glibc-langpack-li - update to 2.28-225.0.4
glibc-langpack-lij - update to 2.28-225.0.4
glibc-langpack-ln - update to 2.28-225.0.4
glibc-langpack-lo - update to 2.28-225.0.4
glibc-langpack-lt - update to 2.28-225.0.4
glibc-langpack-lv - update to 2.28-225.0.4
glibc-langpack-lzh - update to 2.28-225.0.4
glibc-langpack-to - update to 2.28-225.0.4
glibc-langpack-ve - update to 2.28-225.0.4
glibc-langpack-uz - update to 2.28-225.0.4
glibc-langpack-ur - update to 2.28-225.0.4
glibc-langpack-unm - update to 2.28-225.0.4
glibc-langpack-uk - update to 2.28-225.0.4
glibc-langpack-ug - update to 2.28-225.0.4
glibc-langpack-tt - update to 2.28-225.0.4
glibc-langpack-ts - update to 2.28-225.0.4
glibc-langpack-tr - update to 2.28-225.0.4
glibc-langpack-tpi - update to 2.28-225.0.4
glibc-langpack-vi - update to 2.28-225.0.4
glibc-langpack-tn - update to 2.28-225.0.4
glibc-langpack-tl - update to 2.28-225.0.4
glibc-langpack-tk - update to 2.28-225.0.4
glibc-langpack-tig - update to 2.28-225.0.4
glibc-langpack-ti - update to 2.28-225.0.4
glibc-langpack-the - update to 2.28-225.0.4
glibc-langpack-th - update to 2.28-225.0.4
glibc-langpack-tg - update to 2.28-225.0.4
glibc-langpack-te - update to 2.28-225.0.4
glibc-langpack-tcy - update to 2.28-225.0.4
glibc-langpack-zu - update to 2.28-225.0.4
glibc-doc - addressed in versions 2.28-225.0.4, 2.36-10
nss_hesiod - addressed in versions 2.28-225.0.4, 2.36-10
nss_db - addressed in versions 2.28-225.0.4, 2.36-10
nscd - update to 2.28-225.0.4
libnsl - addressed in versions 2.28-225.0.4, 2.36-10
glibc-utils - addressed in versions 2.28-225.0.4, 2.36-10
glibc-static - addressed in versions 2.28-225.0.4, 2.36-10
glibc-nss-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-minimal-langpack - addressed in versions 2.28-225.0.4, 2.36-10
glibc-locale-source - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-af - update to 2.28-225.0.4
glibc-langpack-zh - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-yuw - update to 2.28-225.0.4
glibc-langpack-yue - update to 2.28-225.0.4
glibc-langpack-yo - update to 2.28-225.0.4
glibc-langpack-yi - update to 2.28-225.0.4
glibc-langpack-xh - update to 2.28-225.0.4
glibc-langpack-wo - update to 2.28-225.0.4
glibc-langpack-wal - update to 2.28-225.0.4
glibc-langpack-wae - update to 2.28-225.0.4
glibc-langpack-wa - update to 2.28-225.0.4
glibc-langpack-sm - update to 2.28-225.0.4
glibc-langpack-sc - update to 2.28-225.0.4
glibc-langpack-sd - update to 2.28-225.0.4
glibc-langpack-se - update to 2.28-225.0.4
glibc-langpack-sgs - update to 2.28-225.0.4
glibc-langpack-shn - update to 2.28-225.0.4
glibc-langpack-shs - update to 2.28-225.0.4
glibc-langpack-si - update to 2.28-225.0.4
glibc-langpack-sid - update to 2.28-225.0.4
glibc-langpack-sk - update to 2.28-225.0.4
glibc-langpack-sl - update to 2.28-225.0.4
glibc-langpack-agr - update to 2.28-225.0.4
glibc-langpack-so - update to 2.28-225.0.4
glibc-langpack-sq - update to 2.28-225.0.4
glibc-langpack-sr - update to 2.28-225.0.4
glibc-langpack-ss - update to 2.28-225.0.4
glibc-langpack-st - update to 2.28-225.0.4
glibc-langpack-sv - update to 2.28-225.0.4
glibc-langpack-sw - update to 2.28-225.0.4
glibc-langpack-szl - update to 2.28-225.0.4
glibc-langpack-ta - update to 2.28-225.0.4
compat-libpthread-nonshared - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-aa - update to 2.28-225.0.4
glibc-headers - update to 2.28-225.0.4
glibc-gconv-extra - addressed in versions 2.28-225.0.4, 2.36-10
glibc-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-common - addressed in versions 2.28-225.0.4, 2.36-10
glibc-benchtests - addressed in versions 2.28-225.0.4, 2.36-10
glibc-all-langpacks - addressed in versions 2.28-225.0.4, 2.36-10
glibc - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-sat - update to 2.28-225.0.4
glibc-langpack-pt - update to 2.28-225.0.4
glibc-langpack-quz - update to 2.28-225.0.4
glibc-langpack-raj - update to 2.28-225.0.4
glibc-langpack-ro - update to 2.28-225.0.4
glibc-langpack-ru - update to 2.28-225.0.4
glibc-langpack-rw - update to 2.28-225.0.4
glibc-langpack-sa - update to 2.28-225.0.4
glibc (Debian package) - addressed in versions 2.31-13+deb11u7, 2.36-9+deb12u3
glibc - update to 2.34-52
glibc-help - update to 2.34-137
glibc-locale-archive - update to 2.34-137
glibc - update to 2.34-137
libnsl - update to 2.34-137
glibc-debuginfo - update to 2.34-137
glibc-locale-source - update to 2.34-137
glibc-compat-2.17 - update to 2.34-137
glibc-debugutils - update to 2.34-137
glibc-common - update to 2.34-137
glibc-nss-devel - update to 2.34-137
glibc-all-langpacks - update to 2.34-137
glibc-debugsource - update to 2.34-137
nss_modules - update to 2.34-137
glibc-devel - update to 2.34-137
nscd - update to 2.34-137
libc6 (Ubuntu package) - addressed in versions 2.35-0ubuntu3.4, 2.37-0ubuntu2.1
glibc - addressed in versions 2.36-14.fc37, 2.37-10.fc38, 2.38-6.fc39
sys-libs/glibc - update to 2.37-r7
IBM Cloud Transformation Advisor - update to 3.10.0
IBM Cloud Object Storage Systems - addressed in versions 3.17.0.128, 3.17.5.100
IBM Cloud Pak for Watson AIOps - update to 4.4.0
redhat-release-virtualization-host (Red Hat package) - update to 4.5.3-10.el8ev
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.14.0
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop - update to 5.0.3
My Cloud OS 5 - update to 5.30.103
Storage Ceph - addressed in versions 6.1z3, 7.0
IBM Elastic Storage System - addressed in versions 6.1.2.8, 6.1.8.3
rhel-- (Red Hat package) - addressed in versions 8/aarch64/7436/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8/x86_64/7418/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/s390x/9193/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9181/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9407/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.11-r1, 9.3.3.2-r1
My Cloud Home Duo - update to 9.8.0-102
My Cloud Home - update to 9.8.0-102
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Robotic Process Automation - addressed in versions 21.0.7.18, 23.0.18
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.18

• Exploit #11199 - CVE-2023-4911-Exploit (CVE-2023-4911 exploit) (March 7, 2025)
• Exploit #10793 - CVE-2023-4911 (Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit ) (November 4, 2024)
• Exploit #10629 - CVE-2023-4911-PoC (Repository containing a Proof of Concept (PoC) demonstrating the impact of CVE-2023-4911, a vulnerability in glibc's ld.so dynamic loader, exposing risks related to Looney Tunables. ) (October 22, 2024)
• Exploit #10126 - CVE-2023-4911 (Looney Tunables Local privilege escalation (CVE-2023-4911) workshop) (June 28, 2024)
• Exploit #9833 - CVE-2023-4911 (CVE-2023-4911 proof of concept) (May 23, 2024)
• Exploit #9823 - CVE-2023-4911 (CVE-2023-4911) (May 23, 2024)
• Exploit #9752 - looney-tunables-CVE-2023-4911 () (April 26, 2024)
• Exploit #9622 - CVE-2023-4911 (PoC for CVE-2023-4911) (March 22, 2024)
• Exploit #9465 - LooneyPwner (Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.) (December 27, 2023)
• Exploit #9451 - Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables) (December 20, 2023)
• Exploit #9373 - POC_CVE4911 (PoC exploits are not meant to cause harm, but to show security weaknesses within software. Identifying issues allows companies to patch vulnerabilities and protect itself against attacks) (October 8, 2023)

• https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

• Privilege escalation in GNU Glibc
• Ubuntu update for glibc
• Debian update for glibc
• Fedora 39 update for glibc
• Fedora 37 update for glibc
• Fedora 38 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9.0 Extended Update Support update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.7
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.2
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.0
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.0
• Multiple vulnerabilities in Logging Subsystem 5.5 for Red Hat OpenShift
• Multiple vulnerabilities in Cost Management for RHEL 8
• Multiple vulnerabilities in Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Process Automation Manager 7.13
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Service Interconnect for RHEL 9
• Multiple vulnerabilities in Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Node Health Check Operator 0.6
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Fence Agents Remediation Operator
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.11
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in IBM Cloud Object System
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift 1.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.14
• Multiple vulnerabilities in Red Hat OpenShift Kernel Module Management 1.1
• Multiple security vulnerabilities in IBM Business Automation Manager Open Editions
• IBM Elastic Storage System update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.10
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.5
• Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 update for redhat-release-virtualization-host and redhat-virtualization-host
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Gentoo update for glibc
• openEuler 22.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP2 update for glibc
• openEuler 22.03 LTS update for glibc
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Buffer overflow in IBM Storage Ceph
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Robotic Process Automation
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Amazon Linux AMI update for glibc
• Multiple vulnerabilities in Western Digital My Cloud OS 5
• Anolis OS update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in Western Digital My Cloud Home and Duo
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Multiple vulnerabilities in IBM Edge Application Manager