In this video walk-through, we covered and explained CVE-2023-4911 that affects mostly all Linux distributions and allows an attacker to escalate privileges to root. The vulnerability impacts the GNU C Library’s dynamic loader, known as ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. We used a lab setup specifically to try this exploit using TryHackMe Looney Tunables room.
**********
Receive Cyber Security Field, Certifications Notes and Special Training Videos
******
Writeup
TryHackMe Looney Tunables
Vulnerability Analysis
********
Patreon
LinkedIn
[1]:
[2]:
Website
Backup channel
My Movie channel:
******
[ad_2]
source