MGASA-2023-0286

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2023-4911
Published: 11 Oct 2023, 21:04
Last modified:30 May 2026, 05:15

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 Oct 2023, 21:04
Published
Vulnerability first disclosed
30 May 2026, 05:15
Last Modified
Vulnerability information updated

Description

Updated glibc packages fix a security vulnerability The updated packages fix a security vulnerability: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. (CVE-2023-4911)

Affected Systems

  • mageia•glibc

    < 2.32-32.mga8

  • mageia•glibc

    < 2.36-51.mga9

References (5)