Is CVE-2023-4911 actively exploited?

CVE-2023-4911 has no public evidence of in-the-wild exploitation as of 2026-01-08.

What is the CVSS score for CVE-2023-4911?

CVE-2023-4911 has a CVSS score of 7.8 (HIGH severity). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2023-4911?

Patch guidance is available from netapp security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2023-4911.

Fix CVE-2023-4911 - HIGH netapp bootstrap os

Q: Which products are affected by CVE-2023-4911?

69 products: netapp bootstrap os, gnu glibc, fedoraproject fedora, fedoraproject fedora, fedoraproject fedora, and 64 more.

Description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector: local
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-122 CWE-787 · Out-of-bounds Write

Metadata

Primary Vendor: NETAPP
Published: 10/3/2023
Last Modified: 1/8/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

netapp : bootstrap_osgnu : glibcfedoraproject : fedorafedoraproject : fedorafedoraproject : fedoraredhat : codeready_linux_builderredhat : codeready_linux_builder_eusredhat : codeready_linux_builder_eusredhat : codeready_linux_builder_eusredhat : codeready_linux_builder_eusredhat : codeready_linux_builder_for_arm64redhat : codeready_linux_builder_for_arm64_eusredhat : codeready_linux_builder_for_arm64_eusredhat : codeready_linux_builder_for_arm64_eusredhat : codeready_linux_builder_for_arm64_eusredhat : codeready_linux_builder_for_ibm_z_systemsredhat : codeready_linux_builder_for_ibm_z_systems_eusredhat : codeready_linux_builder_for_ibm_z_systems_eusredhat : codeready_linux_builder_for_ibm_z_systems_eusredhat : codeready_linux_builder_for_ibm_z_systems_eusredhat : codeready_linux_builder_for_power_little_endianredhat : codeready_linux_builder_for_power_little_endian_eusredhat : codeready_linux_builder_for_power_little_endian_eusredhat : codeready_linux_builder_for_power_little_endian_eusredhat : codeready_linux_builder_for_power_little_endian_eusredhat : virtualizationredhat : virtualization_hostredhat : enterprise_linuxredhat : enterprise_linuxredhat : enterprise_linux_eusredhat : enterprise_linux_eusredhat : enterprise_linux_eusredhat : enterprise_linux_eusredhat : enterprise_linux_for_arm_64redhat : enterprise_linux_for_arm_64_eusredhat : enterprise_linux_for_arm_64_eusredhat : enterprise_linux_for_arm_64_eusredhat : enterprise_linux_for_arm_64_eusredhat : enterprise_linux_for_ibm_z_systemsredhat : enterprise_linux_for_ibm_z_systems_eusredhat : enterprise_linux_for_ibm_z_systems_eusredhat : enterprise_linux_for_ibm_z_systems_eusredhat : enterprise_linux_for_ibm_z_systems_eus_s390xredhat : enterprise_linux_for_power_big_endian_eusredhat : enterprise_linux_for_power_little_endianredhat : enterprise_linux_for_power_little_endian_eusredhat : enterprise_linux_for_power_little_endian_eusredhat : enterprise_linux_for_power_little_endian_eusredhat : enterprise_linux_server_ausredhat : enterprise_linux_server_ausredhat : enterprise_linux_server_ausredhat : enterprise_linux_server_ausredhat : enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsredhat : enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsredhat : enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsredhat : enterprise_linux_server_tusredhat : enterprise_linux_update_services_for_sap_solutionsredhat : enterprise_linux_update_services_for_sap_solutionsredhat : enterprise_linux_update_services_for_sap_solutionscanonical : ubuntu_linuxcanonical : ubuntu_linuxdebian : debian_linuxdebian : debian_linuxnetapp : h410c_firmwarenetapp : h300s_firmwarenetapp : h500s_firmwarenetapp : h700s_firmwarenetapp : h410s_firmwarenetapp : ontap_select_deploy_administration_utility

Remediation Guidance

Executive Summary

View on NIST NVD