CVE-2023-4911 PoC — Glibc: buffer overflow in ld.so leading to privilege escalation

Source

https://github.com/Diego-AltF4/CVE-2023-4911

Associated Vulnerability

Title: Glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
Description:A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Description

Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit

Readme

# Proof of concept for CVE-2023-4911 (Looney Tunables)


This vulnerability has been discovered by Qualys Threat Research. [Here you can read the advisory they published](https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt), it explains in depth the vulnerability.

The exploit has been tested on Ubuntu 22.04.2 LTS with GLIBC 2.35-0ubuntu3.1.

## Testing the exploit

The makefile allows testing the exploit in the following scenarios:

1. With ASLR disabled (test).
2. With ASLR enabled (exploit) 
3. Debugging the exploit (debug)

### Demo

![exploit](https://i.imgur.com/sR520VK.jpg)

-----
Kudos to [leesh3288](https://github.com/leesh3288/CVE-2023-4911) for his exploit.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →