Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    USN-6409-1 (UBUNTU-CVE-2023-4527)

    Vulnerability from osv_ubuntu – Published: 2023-10-03 18:04 – Updated: 2026-04-22 07:37 – Source website
    VLAI
    Summary
    glibc vulnerabilities
    Details

    It was discovered that the GNU C Library incorrectly handled the GLIBC_TUNABLES environment variable. An attacker could possibly use this issue to perform a privilege escalation attack. (CVE-2023-4911)

    It was discovered that the GNU C Library incorrectly handled certain DNS responses when the system was configured in no-aaaa mode. A remote attacker could possibly use this issue to cause the GNU C Library to crash, resulting in a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-4527)

    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-4911",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "glibc-source",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc-devtools",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-dev-s390",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-prof",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-s390",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "locales",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "locales-all",
            "binary_version": "2.35-0ubuntu3.4"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.35-0ubuntu3.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "glibc",
        "purl": "pkg:deb/ubuntu/glibc@2.35-0ubuntu3.4?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.35-0ubuntu3.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.34-0ubuntu3",
        "2.35-0ubuntu1",
        "2.35-0ubuntu3",
        "2.35-0ubuntu3.1",
        "2.35-0ubuntu3.3"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that the GNU C Library incorrectly handled the\nGLIBC_TUNABLES environment variable. An attacker could possibly use this\nissue to perform a privilege escalation attack. (CVE-2023-4911)\n\nIt was discovered that the GNU C Library incorrectly handled certain DNS\nresponses when the system was configured in no-aaaa mode. A remote attacker\ncould possibly use this issue to cause the GNU C Library to crash,\nresulting in a denial of service. This issue only affected Ubuntu 23.04.\n(CVE-2023-4527)\n",
  "id": "USN-6409-1",
  "modified": "2026-04-22T07:37:06Z",
  "published": "2023-10-03T18:04:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6409-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-4527"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-4911"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "glibc vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2023-4527",
    "UBUNTU-CVE-2023-4911"
  ]
}