Thursday, October 5, 2023

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions

A new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library's ld.so dynamic loader that, if successfully exploited, could lead to a local privilege escalation and allow a threat actor to gain root privileges.
Tracked as CVE-2023-4911 (CVSS score: 7.8), the issue is a buffer overflow that resides in the dynamic loader's processing of the GLIBC_TUNABLES


http://dlvr.it/Sx1XZ4

No comments:

Post a Comment

CISA says SonicWall bug being exploited as experts warn of ransomware gang use - The Record from Recorded Future News

CISA says SonicWall bug being exploited as experts warn of ransomware gang use  The Record from Recorded Future News http://dlvr.it/TD4N1S