Lucene search

K
osvGoogleOSV:USN-6409-1
HistoryOct 03, 2023 - 6:04 p.m.

glibc vulnerabilities

2023-10-0318:04:23
Google
osv.dev
8
gnu c library
glibc_tunables
privilege escalation
dns responses
denial of service
ubuntu 23.04

7.7 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.2%

It was discovered that the GNU C Library incorrectly handled the
GLIBC_TUNABLES environment variable. An attacker could possibly use this
issue to perform a privilege escalation attack. (CVE-2023-4911)

It was discovered that the GNU C Library incorrectly handled certain DNS
responses when the system was configured in no-aaaa mode. A remote attacker
could possibly use this issue to cause the GNU C Library to crash,
resulting in a denial of service. This issue only affected Ubuntu 23.04.
(CVE-2023-4527)