180 matches found
Fedora: Security Advisory for glibc (FEDORA-2023-028062484e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
CVE-2023-4911 - Looney Tunables This is a atm very rough pr...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
PoC of CVE-2023-4911 "Looney Tunables" This is a PoC of CVE-2...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
CVE-2023-4911 https://www.qualys.com/2023/10/03/cve-2023-4911...
Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions
A new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library's ld.so dynamic loader that, if successfully exploited, could lead to a local privilege escalation and allow a threat actor to gain root privileges. Tracked as CVE-2023-4911 CVSS score: 7.8, the iss...
GLSA-202310-03 : glibc: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202310-03 glibc: Multiple vulnerabilities - An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and...
Ubuntu: Security Advisory (USN-6409-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-4911
creationtimestamp| type| source ---|---|--- 2023-10-03 19:26:43+00:00| seen| https://t.me/ctinow/140936 2023-10-03 22:25:32+00:00| seen| https://t.me/cibsecurity/71521 2023-10-04 09:54:27+00:00| published-proof-of-concept| Telegram/DC49U-yyOf0wvALqOLP1PpSKVxWrQUjwJZr2ekYXZeihgw 2023-10-04...
CVE-2023-4911 vulnerabilities
Vulnerabilities for packages: glibc...
CVE-2023-4911 vulnerabilities
Vulnerabilities for packages: glibc...
USN-6409-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library incorrectly handled the GLIBCTUNABLES environment variable. An attacker could possibly use this issue to perform a privilege escalation attack. CVE-2023-4911 It was discovered that the GNU C Library incorrectly handled certain DNS responses when the system...
[SECURITY] [DSA 5514-1] glibc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5514-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 03, 2023 https://www.debian.org/security/faq -...
CVE-2023-4911 Glibc: buffer overflow in ld.so leading to privilege escalation
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...
CVE-2023-4911
CVE-2023-4911 is a buffer overflow in the GNU C Library ld.so when processing GLIBC_TUNABLES, enabling local privilege escalation via malicious GLIBC_TUNABLES values when launching binaries with SUID. Affected: glibc, with versions older than 2.38-6 (per CBLMARINER:34733) and older listings notin...
CVE-2023-4911
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...
Ubuntu 22.04 LTS / 23.04 : GNU C Library vulnerabilities (USN-6409-1)
The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6409-1 advisory. It was discovered that the GNU C Library incorrectly handled the GLIBCTUNABLES environment variable. An attacker could possibly use this issue to...
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue allows an local attacker to use maliciously crafted GLIBCTUNABLES when launching binaries with SUID permission to execute code in the context of the root user...
CVE-2022-4911
Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...
CVE-2022-4911
CVE-2022-4911 : A vulnerability in Google Chromeβs DevTools involves insufficient data validation, allowing a remote attacker to bypass the Content Security Policy via a crafted HTML page. Affected product: Google Chrome (DevTools component); affected versions are prior to 106.0.5249.62. Underlyi...