Exploit for #VU81437 Buffer overflow in Glibc

Vulnerability identifier: #VU81437

Vulnerability risk: Low

CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2023-4911

CWE-ID: CWE-119

Exploitation vector: Local

Exploits in database: 11

• March 7, 2025
  • CVE-2023-4911-Exploit (CVE-2023-4911 exploit) [Github]
• November 4, 2024
  • CVE-2023-4911 (Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit ) [Github]
• October 22, 2024
  • CVE-2023-4911-PoC (Repository containing a Proof of Concept (PoC) demonstrating the impact of CVE-2023-4911, a vulnerability in glibc's ld.so dynamic loader, exposing risks related to Looney Tunables. ) [Github]
• June 28, 2024
  • CVE-2023-4911 (Looney Tunables Local privilege escalation (CVE-2023-4911) workshop) [Github]
• May 23, 2024
  • CVE-2023-4911 (CVE-2023-4911 proof of concept) [Github]
  • CVE-2023-4911 (CVE-2023-4911) [Github]
• April 26, 2024
  • looney-tunables-CVE-2023-4911 () [Github]
• March 22, 2024
  • CVE-2023-4911 (PoC for CVE-2023-4911) [Github]
• December 27, 2023
  • LooneyPwner (Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.) [Github]
• December 20, 2023
  • Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables) [Metasploit]
• October 8, 2023
  • POC_CVE4911 (PoC exploits are not meant to cause harm, but to show security weaknesses within software. Identifying issues allows companies to patch vulnerabilities and protect itself against attacks) [Github]

Vulnerable software:
Glibc
Universal components / Libraries / Libraries used by multiple products

Vendor: GNU