Skip to main content
Version: latest

CVE-2023-4911

CVE Details​

CVE-2023-4911

Last Update​

11/7/24

NIST CVE Summary​

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

CVE Severity​

7.8

Status​

Ongoing

Affected Products & Versions​

  • Palette Enterprise 4.5.3, 4.5.8
  • Palette VerteX 4.5.3, 4.5.8

Revision History​

  • 1.0 10/14/24 Initial Publication
  • 2.0 10/14/2024 Added Palette Enterprise & Palette VerteX 4.5.3 to Affected Products
  • 3.0 11/7/2024 Added Palette Enterprise & Palette VerteX 4.5.8 to Affected Products