Vuln: CVE-2023-4911 | Detection.FYI

Potential Privilege Escalation via CVE-2023-4911

Sep 19, 2026 · Domain: Endpoint OS: Linux Use Case: Threat Detection Tactic: Privilege Escalation Use Case: Vulnerability Data Source: Elastic Defend Resources: Investigation Guide Noise: Low Performance: Normal Profile: Recommended Threat: Vulnerability Exploit Rule Type: Event Correlation (EQL) Platform: Linux Vuln: CVE-2023-4911 ·
Share on:

This rule detects potential privilege escalation attempts through Looney Tunables (CVE-2023-4911). Looney Tunables is a buffer overflow vulnerability in GNU C Library's dynamic loader's processing of the GLIBC_TUNABLES environment variable.

Read More