Summary:
A new Linux security vulnerability named "Looney Tunables" has been identified within the GNU C library's ld.so dynamic loader, posing a risk of local privilege escalation and root privilege acquisition if exploited. Tracked as CVE-2023-4911 with a CVSS score of 7.8, this issue results from a buffer overflow in the processing of the GLIBC_TUNABLES environment variable. The GNU C library (glibc) is a fundamental component of Linux-based systems, offering core functions like open, read, write, and more. Glibc's dynamic loader is responsible for preparing and running programs, including resolving shared object dependencies, loading them into memory, and linking them at runtime.[/subscribe_to_unlock_form]
Summary:
A new Linux security vulnerability named "Looney Tunables" has been identified within the GNU C library's ld.so dynamic loader, posing a risk of local privilege escalation and root privilege acquisition if exploited. Tracked as CVE-2023-4911 with a CVSS score of 7.8, this issue results from a buffer overflow in the processing of the GLIBC_TUNABLES environment variable. The GNU C library (glibc) is a fundamental component of Linux-based systems, offering core functions like open, read, write, and more. Glibc's dynamic loader is responsible for preparing and running programs, including resolving shared object dependencies, loading them into memory, and linking them at runtime.[emaillocker id="1283"]
The vulnerability affects major Linux distributions, including Fedora 37 and 38, Ubuntu 22.04 and 23.04, and Debian 12 and 13, with the likelihood of other distributions being susceptible. Notably, Alpine Linux, which employs the musl libc library, is exempt from this vulnerability. The presence of a buffer overflow vulnerability in how the dynamic loader handles the GLIBC_TUNABLES environment variable poses significant risks. This variable, designed to optimize applications linked with glibc, plays a critical role for developers and system administrators. Its misuse or exploitation can substantially impact system performance, reliability, and security.
Red Hat has issued an advisory stating that a local attacker could potentially leverage this vulnerability by using maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. In response to this threat, it is imperative for Linux users to promptly address this vulnerability through security patches and updates to mitigate the risk of local privilege escalation and potential root access by malicious actors.
Recommendations:
References:
The following reports contain further technical details:
https://thehackernews.com/2023/10/looney-tunables-new-linux-flaw-enables.html
[/emaillocker]