CVE-2023-4911 PoC — Glibc: buffer overflow in ld.so leading to privilege escalation

Source

https://github.com/yanfernandess/Looney-Tunables-CVE-2023-4911

Associated Vulnerability

Title: Glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
Description:A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Readme

# Looney-Tunables-CVE-2023-4911

Os arquivos utilizados estão anexados neste repositório.

#TASK 5
Primeiro, você deve executar o script Python para gerar o malware libc.so.6.

![image](https://github.com/yanfernandess/Looney-Tunables-CVE-2023-4911/assets/100174458/100b0fd0-1940-4d8b-8509-ec815e3718e6)

Você precisará então compilar o exploit usando gcc:

![image](https://github.com/yanfernandess/Looney-Tunables-CVE-2023-4911/assets/100174458/0e2a8bd3-da71-4503-b33b-c46e319573be)

E por último podemos explorar e encontrar a flag root.txt.

![image](https://github.com/yanfernandess/Looney-Tunables-CVE-2023-4911/assets/100174458/ec815fac-ba5f-48b2-8517-83dce328b269)

What's the value of the flag in /root/root.txt?
R: THM{TH-TH-THATS-SECURE-FOLK$!}

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →