152 matches found
CVE-2023-4911-PoC
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...
RLSA-2026:98512 Moderate: glibc security, bug fix, and enhancement update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: ns...
CVE-2023-4911
PoC of CVE-2023-4911 "Looney Tunables" This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Code has been tested on Ubuntu 22.04.3 with glibc version 2.35-0ubuntu3.3. No attempts have...
USN-9065-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. CVE-2026-18374 It was discovered that the GNU C Library incorrectly handled long domain names in...
USN-9065-1 glibc vulnerabilities
It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. CVE-2026-18374 It was discovered that the GNU C Library incorrectly handled long domain names in...
glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...
glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...
glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...
glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...
CVE-2023-4911
CVE-2023-4911 This is a PoC for CVE-2023-4911 "Looney Tunables" that exploits a bug in the glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. This is a rewrite of the C PoC's into a pure python approach. I did this to make it easier to customize the exploit...
CVE-2023-4911
glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...
glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...
glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...
Amazon Linux 2023 : compat-libpthread-nonshared, glibc, glibc-all-langpacks (ALAS2023-2026-3396)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3396 advisory. A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding...
Amazon Linux 2 : glibc (ALAS-2026-4078)
The version of glibc installed on the remote host is prior to 2.26-64. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4078 advisory. A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.4...
glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader
A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...
glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...
Moderate: glibc security update
The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: ns...
SUSE SLES11: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / glibc-html / etc (SUSE-SU-2026:4669-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4669-1 advisory. This update for glibc fixes the following issue: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
SUSE-SU-2026:4669-1 Security update for glibc
This update for glibc fixes the following issue: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges bsc1282509...