CVE-2023-4911
CVE-2023-4911: 2 tracked advisory records across NetApp, Red Hat. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetApp
1 advisory- Advisory severityHigh7.8
High [CVE-2023-4911] GNU C Library (glibc) Vulnerability in NetApp Products
NTAP-20231013-0006Source published Source updated
Multiple NetApp products incorporate GNU C. GNU C Library (glibc) is susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). ONTAP Select Deploy administration utility: Affected in version 9.13.1. NetApp states there is no workaround available at this time. Affected products named by the advisory: NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S; NetApp HCI Baseboard Management Controller (BMC) - H410C; NetApp HCI Compute Node (Bootstrap OS).
- Affected products in this advisory
- NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S
- NetApp HCI Baseboard Management Controller (BMC) - H410C
- NetApp HCI Compute Node (Bootstrap OS)
- ONTAP Select Deploy administration utility
- Source-reported affected versions
- 9.13.1
- Source-reported fixed versions
- ONTAP Select Deploy administration utility: 9.14.1
- Mitigation guidance
- Update affected NetApp products to a fixed release: ONTAP Select Deploy administration utility: 9.14.1.
- NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
- NetApp HCI Baseboard Management Controller (BMC) - H410C has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
- NetApp HCI Compute Node (Bootstrap OS) has no planned fix; migrate to a supported release or product and consult NetApp's end-of-support notice.
Red Hat
1 advisory- Advisory severityHigh7.8
High [CVE-2023-4911] buffer overflow in ld.so leading to privilege escalation
CVE-2023-4911Source published Source updated
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. This vulnerability was introduced in glibc version 2.34. RHEL-8 ships glibc 2.28, which is not originally affected by this vulnerability. RHEL-8.4 and older are not affected by this vulnerability. Red Hat severity: Important — CVSS 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-122. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 9.0…
- Affected products in this advisory
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Red Hat Enterprise Linux 9.0 Extended Update Support
- Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
- Red Hat package: glibc
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- glibc-0:2.28-225.el8_8.6
- glibc-0:2.28-189.6.el8_6
- glibc-0:2.34-60.el9_2.7
- glibc-0:2.34-28.el9_0.4
7 more entries in the full advisory.
- Mitigation guidance
- For customers who cannot update immediately and do not have Secure Boot feature enabled, the issue can be mitigated using the provided SystemTap script with the following steps. When enabled, any setuid program invoked with GLIBC_TUNABLES in the environment will be terminated immediately. To invoke the setuid program, users will then have to unset or clear the GLIBC_TUNABLES envvar, e.g. `GLIBC_TUNABLES= sudo` . Note that these mitigation steps will need to be repeated if the system is rebooted. 1) Install required systemtap packages and dependencies as per - https://access.redhat.com/solutions/5441 2) Create the following systemtap script, and name it stap_block_suid_tunables.stp: ~~~ function has_tunable_string:long() { name = "GLIBC_TUNABLES" mm = @task(task_current())->mm; if (mm) { env_start = @mm(mm)->env_start; env_end = @mm(mm)->env_end; if (env_start != 0 && env_end != 0) while (env_end > env_start) { cur = user_string(env_start, ""); env_name = tokenize(cur, "="); if (env_name == name && tokenize("", "") != "") return 1; env_start += strlen (cur) + 1 } } return 0; } probe process("/lib*/ld*.so*").function("__tunables_init") { atsecure = 0; /* Skip processing if we can't read __libc_enable_secure, e.g. core dump handler (systemd-cgroups-agent and systemd-coredump). */ try { atsecure = @var("__libc_enable_secure"); } catch { printk (4, sprintf ("CVE-2023-4911: Skipped check: %s (%d)", execname(), pid())); } if (atsecure && has_tunable_string ()) raise (9); } ~~~ 3) Load the systemtap module into the running kernel: ~~~ stap -g -F -m stap_block_suid_tunables stap_block_suid_tunables.stp ~~~ 4) Ensure the module is loaded: ~~~ lsmod | grep -i stap_block_suid_tunables stap_block_suid_tunables 249856 0 ~~~ 5) Once the glibc package is updated to the version containing the fix, the systemtap generated kernel module can be removed by running: ~~~ rmmod stap_block_suid_tunables ~~~ If Secure Boot is enabled on a system, the SystemTap module must be signed. An external compiling server can be used to sign the generated kernel module with a key enrolled into the kernel's keyring or starting with SystemTap 4.7 you can sign a module without a compile server. See further information here - https://www.redhat.com/sysadmin/secure-boot-systemtap
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.