CVE-2023-4911 PoC — glibc 缓冲区错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-4911.yaml

Associated Vulnerability

Title:glibc 缓冲区错误漏洞 (CVE-2023-4911)
Description:glibc（GNU C Library）是GNU计划所实现的C标准库。 glibc存在缓冲区错误漏洞，该漏洞源于动态加载程序ld.so存在缓冲区溢出漏洞。

Description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

File Snapshot


 id: CVE-2023-4911

info:
  name: Looney Tunables Linux - Local Privilege Escalation
  author: nybble

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.