CVE-2023-4911: Looney Tunables – enables local attackers to gain root privileges in Linux

The Qualys Threat Research Unit (TRU) recently uncovered a buffer overflow vulnerability within the GNU C Library’s dynamic loader, specifically in how it handles the GLIBC_TUNABLES environment variable. Their team has detected and exploited this vulnerability. When exploited, it leads…








