CVE-2023-4911

CVSS: 7.8 High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Risk score: 100.0
Known exploited: CISA KEV
Published: 2023-10-03
Status: Analyzed

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Weaknesses

CWE-122CWE-787

Coverage 1

threat-intel

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

This Securelist article discusses the security risks associated with containerization using Docker, particularly the prevalence of outdated and vulnerable software within pre-built images. The article highlights how atta…

Securelist · May 29, 2026 High

CVE-2025-55182 CVE-2023-4911 CVE-2021-4034 US containers docker vulnerabilities

All articles mentioning it

news.mlab.sh

CVE-2023-4911

Weaknesses

Coverage 1

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Advisories and references