{"metadata": {"vulnerability": "cve-2023-4911", "count": 362, "kinds": {"milestone": 42, "sighting": 140, "kev": 11, "other": 169}}, "data": [{"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T00:00:00Z", "date_only": false, "value": "2023-06-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-09-04T00:00:00Z", "date_only": false, "value": "2023-09-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-09-04T00:00:00Z", "date_only": false, "value": "2023-09-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-09-04T00:00:00Z", "date_only": false, "value": "2023-09-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-09-04T00:00:00Z", "date_only": false, "value": "2023-09-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2023-4911", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-12T00:00:00Z", "date_only": false, "value": "2023-09-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-12T13:10:32.495Z", "date_only": false, "value": "2023-09-12T13:10:32.495Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-4911", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-01T00:00:00Z", "date_only": false, "value": "2023-10-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-03T00:00:00Z", "date_only": false, "value": "2023-10-03T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-03T00:00:00Z", "date_only": false, "value": "2023-10-03T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "cve-2023-4911", "field": "containers.cna.datePublic"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-4911", "record": "UBUNTU-CVE-2023-4911", "field": "published"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-03T17:00:00Z", "date_only": false, "value": "2023-10-03T17:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2023-4911", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2023-10-03T17:25:08.434Z", "date_only": false, "value": "2023-10-03T17:25:08.434Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4911", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-03T18:15:10Z", "date_only": false, "value": "2023-10-03T18:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M77W-6VJW-WH2F", "record": "GHSA-M77W-6VJW-WH2F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-03T18:15:10.463Z", "date_only": false, "value": "2023-10-03T18:15:10.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4911", "record": "FKIE_CVE-2023-4911", "field": "published"}, {"timestamp": "2023-10-03T18:15:10.463Z", "date_only": false, "value": "2023-10-03T18:15:10.463", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-4911", "record": "GSD-2023-4911", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-10-03T18:30:23Z", "date_only": false, "value": "2023-10-03T18:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M77W-6VJW-WH2F", "record": "GHSA-M77W-6VJW-WH2F", "field": "published"}, {"timestamp": "2023-10-03T19:26:43Z", "date_only": false, "value": "2023-10-03T19:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/140936", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "93d066a2-920f-446d-a330-cb8eef0d13d3", "content": "https://ift.tt/eT1DUqc\nCVE-2023-4911: Looney Tunables \u2013 Local Privilege Escalation in the glibc\u2019s ld.so", "url": "https://t.me/ctinow/140936"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-03T22:25:32Z", "date_only": false, "value": "2023-10-03T22:25:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/71521", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e02e2a4b-2c8d-46ae-90c5-6bf4f52e4c72", "content": "\u203c CVE-2023-4911 \u203c\n\nA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71521"}, {"timestamp": "2023-10-04T09:54:27Z", "date_only": false, "value": "2023-10-04T09:54:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DC49U-yyOf0wvALqOLP1PpSKVxWrQUjwJZr2ekYXZeihgw", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "be204373-2e1e-444e-9b67-13be1493483c"}, {"timestamp": "2023-10-04T10:49:21Z", "date_only": false, "value": "2023-10-04T10:49:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/882", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7418e1a3-f87f-4aef-a8d2-d68d4d4b96bb", "content": "Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions\nhttps://thehackernews.com/2023/10/looney-tunables-new-linux-flaw-enables.html\n\nA new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library's ld.so dynamic loader that, if successfully exploited, could lead to a local privilege escalation and allow a threat actor to gain root privileges.\nTracked as\u00a0CVE-2023-4911\u00a0(CVSS score: 7.8), the issue is a buffer overflow that resides in the dynamic loader's processing of the\u00a0GLIBC_TUNABLES", "url": "https://t.me/KomunitiSiber/882"}, {"timestamp": "2023-10-04T13:28:31Z", "date_only": false, "value": "2023-10-04T13:28:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/918", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7d542efc-9e84-4e0d-9e29-fdc95845794a", "content": "\ud83d\udc40 \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f LPE \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux. \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 ld.so, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a GNU C, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f GLIBC_TUNABLES,  \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root. \u041d\u0430\u0448\u0435\u0434\u0448\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Qualys \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u043d\u0438 \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0430\u0442 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f  \u043f\u0430\u0442\u0447\u0430.  \n\u0414\u0435\u0444\u0435\u043a\u0442 CVE-2023-4911 (CVSS 7.8) \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432 2021 \u0433\u043e\u0434\u0443 \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u0437\u0441\u044f \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0443 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Fedora, Ubuntu,  Debian \u0438 Red Hat (RHEL).\n\n\u041f\u0430\u0442\u0447 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e, \u043d\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u044d\u0442\u043e \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, Red Hat \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043c\u0435\u0440\u044b \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0434\u0451\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/918"}, {"timestamp": "2023-10-04T14:21:46Z", "date_only": false, "value": "2023-10-04T14:21:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5274", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "67751f50-03e8-4261-8ba0-7252b1e4bab0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for CVE-2023-4911\nURL\uff1ahttps://github.com/leesh3288/CVE-2023-4911\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5274"}, {"timestamp": "2023-10-04T15:25:30Z", "date_only": false, "value": "2023-10-04T15:25:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4925", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "c8e8c1af-e8ce-45ba-ab76-45ad9bb7430a", "content": "\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Linux, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Looney Tunables, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 ld.so \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 GNU C.\n\nGNU C (glibc) \u2014 \u044d\u0442\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 C \u0441\u0438\u0441\u0442\u0435\u043c\u044b GNU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a open, malloc, printf, \u0432\u044b\u0445\u043e\u0434 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b.\u00a0\n\n\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432 glibc \u0438\u043c\u0435\u0435\u0442 \u043f\u0435\u0440\u0432\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 glibc.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f Qualys\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-4911) \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c glibc 2.34 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043c\u0438\u0442, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f SXID_ERASE \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 \u0441 setuid.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b GLIBC_TUNABLES \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Debian 12 \u0438 13, Ubuntu 22.04 \u0438 23.04, \u0430 \u0442\u0430\u043a\u0436\u0435 Fedora 37 \u0438 38 (Alpine Linux \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442\u0441\u044f), \u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e root-\u043f\u0440\u0430\u0432.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 Red Hat, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b GLIBC_TUNABLES \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SUID \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e PoC \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u0441\u0430\u043c\u043e\u0435 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0431\u044b\u0441\u0442\u0440\u043e.", "url": "https://t.me/true_secator/4925"}, {"timestamp": "2023-10-04T16:23:12Z", "date_only": false, "value": "2023-10-04T16:23:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5278", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5fdfbb28-8e5f-4dce-b76b-6eaf422bd593", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-4911 proof of concept\nURL\uff1ahttps://github.com/RickdeJager/CVE-2023-4911\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5278"}, {"timestamp": "2023-10-04T16:43:46Z", "date_only": false, "value": "2023-10-04T16:43:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3963", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "8f9693b8-66b6-43b4-a7c1-da26c5dff28e", "content": "New Linux vulnerability (CVE-2023-4911) named Looney Tunables found in the GNU C library's dynamic loader. Exploitation could lead to root privileges. \n \nLearn how it affects major #Linux distributions: https://thehackernews.com/2023/10/looney-tunables-new-linux-flaw-enables.html", "url": "https://t.me/thehackernews/3963"}, {"timestamp": "2023-10-04T16:50:02Z", "date_only": false, "value": "2023-10-04T16:50:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/R0_Crew/2095", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "52c28456-85e3-4e5c-8fb9-435c0661f396", "content": "Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911)\n\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\nPOC: https://github.com/leesh3288/CVE-2023-4911\n\n#expdev #linux #lpe #Alexs3y", "url": "https://t.me/R0_Crew/2095"}, {"timestamp": "2023-10-04T17:11:53Z", "date_only": false, "value": "2023-10-04T17:11:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/50771", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "bd6d9df7-4c73-418d-bfde-aa5a4c198840", "content": "Severe Glibc Privilege Escalation Vulnerability Impacts Major Linux Distributions\nhttps://www.securityweek.com/severe-glibc-privilege-escalation-vulnerability-impacts-major-linux-distributions/\n\nA local privilege escalation vulnerability (CVE-2023-4911) in the GNU C Library (glibc) can be exploited to gain full root privileges.\nThe post Severe Glibc Privilege Escalation Vulnerability Impacts Major Linux Distributions (https://www.securityweek.com/severe-glibc-privilege-escalation-vulnerability-impacts-major-linux-distributions/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50771"}, {"timestamp": "2023-10-04T18:19:09Z", "date_only": false, "value": "2023-10-04T18:19:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/161", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "12657643-e27f-4076-aa40-0bb2a89fb861", "content": "\u26a1\ufe0fLooney Tunables: PoC\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/leesh3288/CVE-2023-4911\n\n#cve #exploit #privesc", "url": "https://t.me/ap_security/161"}, {"timestamp": "2023-10-04T18:19:09Z", "date_only": false, "value": "2023-10-04T18:19:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/97", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "aa7b1e3c-6d5d-4865-a973-9b01cc5d3f8e", "content": "\u26a1\ufe0fLooney Tunables: PoC\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442:\nhttps://github.com/leesh3288/CVE-2023-4911\n\n#cve #exploit #privesc", "url": "https://t.me/ap_security/97"}, {"timestamp": "2023-10-04T22:00:00Z", "date_only": false, "value": "2023-10-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.generator.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "document.tracking.generator.date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0804", "record": "CERTFR-2023-AVI-0804", "field": "last_revision_date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0804", "record": "CERTFR-2023-AVI-0804", "field": "initial_release_date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:5453", "record": "ALSA-2023:5453", "field": "published"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2023:5455", "record": "ALSA-2023:5455", "field": "published"}, {"timestamp": "2023-10-05T00:00:00Z", "date_only": false, "value": "2023-10-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0804", "record": "CERTFR-2023-AVI-0804", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-05T10:34:33Z", "date_only": false, "value": "2023-10-05T10:34:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/14791", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "a3ace05e-7628-4f91-89fc-3333207d3948", "content": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 Looney Tunables \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux\n\n\u041d\u043e\u0432\u0430\u044f Linux-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Looney Tunables (CVE-2023-4911), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 ld.so \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 GNU C. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Fedora, Ubuntu, Debian \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435.\n\nhttps://xakep.ru/2023/10/05/looney-tunables/", "url": "https://t.me/xakep_ru/14791"}, {"timestamp": "2023-10-05T13:11:35Z", "date_only": false, "value": "2023-10-05T13:11:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-05T13:11:35Z", "date_only": false, "value": "2023-10-05T13:11:35+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-10-05T13:11:35Z", "date_only": false, "value": "2023-10-05T13:11:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-05T15:41:31Z", "date_only": false, "value": "2023-10-05T15:41:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-05T15:41:31Z", "date_only": false, "value": "2023-10-05T15:41:31+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-10-05T15:41:31Z", "date_only": false, "value": "2023-10-05T15:41:31+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-05T16:12:34Z", "date_only": false, "value": "2023-10-05T16:12:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/141415", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7e7c39c1-01d0-4372-8aca-352215735161", "content": "https://ift.tt/jBYQLXE\n\u201cLooney Tunables\u201d bug allows root access on Linux distros (CVE-2023-4911)", "url": "https://t.me/ctinow/141415"}, {"timestamp": "2023-10-05T23:17:54Z", "date_only": false, "value": "2023-10-05T23:17:54Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:5455", "record": "ALSA-2023:5455", "field": "modified"}, {"timestamp": "2023-10-06T06:39:32Z", "date_only": false, "value": "2023-10-06T06:39:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9136", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "69e3719d-2c54-4e86-a608-ad72b15aae28", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS 17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\n4. CVE-2023-4911:\n\"Looney Tunables\"\nLPE in the glibc's ld*so\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n]-> https://github.com/RickdeJager/CVE-2023-4911", "url": "https://t.me/CyberSecurityTechnologies/9136"}, {"timestamp": "2023-10-06T10:29:58Z", "date_only": false, "value": "2023-10-06T10:29:58Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2023:5453", "record": "ALSA-2023:5453", "field": "modified"}, {"timestamp": "2023-10-06T12:16:02Z", "date_only": false, "value": "2023-10-06T12:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/3258", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "518e2cda-3633-4794-8d09-fd6aa01fdac3", "content": "Local Privilege Escalation glibc's ld.so (CVE-2023-4911)\n\n\u27a1\ufe0f \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \n\n\ud83d\udd25POC: https://github.com/leesh3288/CVE-2023-4911\n\n#linux #lpe\n\n\ud83d\udcac \u041a\u0430\u043d\u0430\u043b | \ud83d\udcf6 Github", "url": "https://t.me/poxek/3258"}, {"timestamp": "2023-10-06T12:50:01Z", "date_only": false, "value": "2023-10-06T12:50:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3399", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5486b2c5-35d8-40b2-8785-b4d3d480bb0d", "content": "\u200b\u26a1\ufe0f\u041b\u0438\u043d\u0443\u043a\u0441\u043e\u0438\u0434\u044b \u043d\u0430\u043f\u0440\u044f\u0433\u043b\u0438\u0441\u044c: \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Looney Tunables \u0443\u0436\u0435 \u0433\u0443\u043b\u044f\u0435\u0442 \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udcac \u041d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u0430\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u00abLooney Tunables\u00bb, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-4911 , \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435. \u041f\u0440\u0438\u0447\u0451\u043c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0438\u0437\u043a\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u2014 \u0441\u043f\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0439 \u0445\u0430\u043a\u0435\u0440.\n\nLooney Tunables \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Debian 12 \u0438 13, Ubuntu 22.04 \u0438 23.04, \u0430 \u0442\u0430\u043a\u0436\u0435 Fedora 37 \u0438 38.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u0441\u0440\u0435\u0434\u044b \u00abGLIBC TUNABLES\u00bb, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c \u00abld.so\u00bb, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SUID.\n\n\u041e\u0434\u0438\u043d \u0438\u0437 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u043c \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0423\u0438\u043b\u043b\u043e\u043c \u0414\u043e\u0440\u043c\u0430\u043d\u043d\u043e\u043c, \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041f\u0438\u0442\u0435\u0440\u043e\u043c \u0413\u0435\u0439\u0441\u0441\u043b\u0435\u0440\u043e\u043c \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c \u00abblasty\u00bb.\n\n\u0440\u0443\u0433\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u044e\u0442 \u0441\u0432\u043e\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2023-4911 \u043d\u0430 GitHub \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0430\u0445.\n\n\u00ab\u041d\u0430\u0448\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f, \u0432\u0435\u0434\u0443\u0449\u0430\u044f \u043a \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u043b\u043d\u044b\u0445 root-\u043f\u0440\u0430\u0432 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Fedora, Ubuntu \u0438 Debian, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c \u0438 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b 3 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0421\u0430\u0438\u0434 \u0410\u0431\u0431\u0430\u0441\u0438, \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0443 \u043e\u0442\u0434\u0435\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 Qualys. \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Qualys \u043f\u0435\u0440\u0432\u044b\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0438\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Linux \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0438\u0437-\u0437\u0430 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 Looney Tunables.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3399"}, {"timestamp": "2023-10-06T14:01:56Z", "date_only": false, "value": "2023-10-06T14:01:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/14381", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "15b85057-317b-4bd4-b1db-584c9f0ae2ba", "content": "\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Linux, \u0434\u0430\u044e\u0449\u0435\u0439 root \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445\n\n\u2757\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u201cLooney Tunables\u201d \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-4911, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 ld.so - \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0438 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u2757\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 12 \u043b\u0435\u0442 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b, \u043a\u0430\u043a Ubuntu, Debian, Fedora \u0438 Red Hat. \u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u2757\ufe0f \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GNU C Library \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Linux \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n#Linux #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #LooneyTunables @SecLabNews", "url": "https://t.me/SecLabNews/14381"}, {"timestamp": "2023-10-06T14:05:05Z", "date_only": false, "value": "2023-10-06T14:05:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/4936", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "ea0a232d-d60d-450b-ad9f-884dfa52f026", "content": "DANGER! \u0412 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GNU C Library, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Looney Tunables, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-4911, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Debian 12 \u0438 13, Ubuntu 22.04 \u0438 23.04, \u0430 \u0442\u0430\u043a\u0436\u0435 Fedora 37 \u0438 38.\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 root-\u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SUID, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0443\u044e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f GLIBC_TUNABLES, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c ld.so.\n\n\u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043a\u0430\u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Qualys \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u043f\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u0432 \u0432\u0438\u0434\u0443 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0430\u044f  root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Fedora, Ubuntu \u0438 Debian. \n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435, \u0430 \u043f\u0440\u0430\u0432\u0438\u043b\u043e 72 \u0447\u0430\u0441\u043e\u0432 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u043b.", "url": "https://t.me/true_secator/4936"}, {"timestamp": "2023-10-08T22:00:00Z", "date_only": false, "value": "2023-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-10-09T08:37:20Z", "date_only": false, "value": "2023-10-09T08:37:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/924", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "f3ee3c94-ccab-4310-8837-f81d96d272fb", "content": "\u23e9 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u0418\u0411-\u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\u2699\ufe0f \u041e\u0431\u0437\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Kaspersky ICS CERT. \u041e\u0442\u0447\u0451\u0442 \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u0443 \u2014 \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u0433\u043e\u0434\u0430 \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u0440\u0430\u0437\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0435 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u2014 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e, \u0430\u0432\u0442\u043e\u043f\u0440\u043e\u043c \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0441\u043e\u0432\u0435\u0441\u0442\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\ud83d\udd20\ud83d\udd20\ud83d\udd20 \u0420\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0430 ransomware \u043d\u0430\u0434\u043e \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u0435\u0435. \u0412\u0440\u0435\u043c\u044f, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u0441\u0435\u0442\u0438, \u0441\u043d\u0438\u0437\u0438\u043b\u043e\u0441\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 12 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0441 4,5 \u0434\u043d\u0435\u0439 \u0434\u043e \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0445 \u0447\u0430\u0441\u043e\u0432. \u0412 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0440\u0430\u0441\u043a\u0430\u0442\u043a\u0430 ransomware \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u0443\u0442\u043e\u043a, \u0432 10% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u2014 \u0437\u0430 \u043f\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432. \n\n\ud83d\udccc CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438  \u043e\u0442\u0447\u0451\u0442 \u043e \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c.  \u0412 \u0442\u043e\u043f-3 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e \u0432\u043e\u0448\u043b\u0438 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043d\u0435\u0432\u0435\u0440\u043d\u043e\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0430\u0434\u043c\u0438\u043d\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.  \u0411\u043e\u043b\u0435\u0435 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442\u0447\u0451\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TeamCity \u0438 WS_FTP server \u0443\u0436\u0435 \u0432\u0441\u0442\u0430\u043b\u0438 \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439. Teamcity \u2014 CVE-2023-42793, WS_FTP \u2014  CVE-2023-40044. \n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043b\u0438 PoC \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  CVE-2023-4911 \u0432 ld.so (\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a GNU C), \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043e\u0442\u0441\u0447\u0451\u0442 \u0434\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0448\u0451\u043b.\n\n\ud83c\udfaf \u041e\u0442\u0447\u0451\u0442 \u043e \u043d\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044f\u0445 Mirai, \u0446\u0438\u0440\u043a\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0441 \u043b\u0435\u0442\u0430: catDDoS, hailBot,kiraiBot. \n\n\u0418 \u0441\u043d\u043e\u0432\u0430 \u0441 \u0432\u0430\u043c\u0438 \u043d\u0430\u0448\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430 \u0432 open source \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u0430\u044f \u043f\u043e\u0433\u043e\u0434\u0430 \ud83c\udf1e\n\n1\ufe0f\u20e3 \u0418\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u044f\u043d\u0435\u043d\u044b \u0431\u043e\u043b\u0435\u0435 100 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e 75 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430\u043c\u0438 \u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u0440\u0430\u0436\u0438 \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043d\u0430 $100 000. \n\n2\ufe0f\u20e3 \u0412 npm \u043e\u043a\u043e\u043b\u043e \u043d\u0435\u0434\u0435\u043b\u0438 \u0436\u0438\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 node-hide-console-windows (\u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0431\u0443\u043a\u0432\u043e\u0439  s \u0432 \u043a\u043e\u043d\u0446\u0435), \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439  \u0442\u0440\u043e\u044f\u043d DiscordRAT 2.0, \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u043c \u0436\u0435 \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u043c r77.\n\n3\ufe0f\u20e3 \u0422\u0430\u043c \u0436\u0435 \u0432 npm \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e \u0435\u0449\u0451 \u0431\u043e\u043b\u0435\u0435 30 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043e\u0440\u0443\u044e\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0441 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n4\ufe0f\u20e3 \u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0433\u043e\u0434 Sonatype \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 245000 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u044d\u0442\u043e \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0447\u0435\u043c \u0437\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0432\u0437\u044f\u0442\u044b\u0445.\n\n\ud83d\udc30 \u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u043e\u0433\u043e MaaS BunnyLoader, \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430. \u041d\u0430 \u0447\u0451\u0440\u043d\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u043e\u043d \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435, \u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0448\u0435\u0432\u0438\u0437\u043d\u0435, \u043c\u043d\u043e\u0433\u043e\u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u043c\u0443 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e.\n\n\u041a\u0430\u043a \u043c\u044b \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043b\u0438 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443, \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0441\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0438 \u0432\u043e\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0430\u0446\u0438\u0438:  \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox \u0438 \u0435\u0451 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Predator \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u044b \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 (\u043e\u0442 \u041f\u043e\u0440\u0442\u0443\u0433\u0430\u043b\u0438\u0438 \u0434\u043e \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438) \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044f.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/924"}, {"timestamp": "2023-10-09T11:25:44Z", "date_only": false, "value": "2023-10-09T11:25:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrBDKR28/3392", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "fe671dcc-184d-4d07-975d-43bbe2e9116a", "content": "Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911)\n\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\nPOC: https://github.com/leesh3288/CVE-2023-4911\n\n#expdev #linux #lpe #Alexs3y", "url": "https://t.me/MrBDKR28/3392"}, {"timestamp": "2023-10-09T21:14:14Z", "date_only": false, "value": "2023-10-09T21:14:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GDSpace/962", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "94ecb338-cfdc-41cf-b45e-3c4ff82c6deb", "content": "\u041f\u0440\u043e\u0436\u0435\u043a\u0442\u043e\u0440 \u043f\u043e \u0418\u0411, \u0432\u044b\u043f\u0443\u0441\u043a \u21166 (08.10.2023). \u0417\u0430\u043f\u0438\u0441\u0430\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u044d\u043f\u0438\u0437\u043e\u0434. \u0412 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438.\n\n\u041c\u044b \u044d\u0442\u043e:\n\n\ud83d\udd38 \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041b\u0435\u043e\u043d\u043e\u0432, \"\u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u0440\u043e\u0447\u0435\u0435\"\n\ud83d\udd38 \u041b\u0435\u0432 \u041f\u0430\u043b\u0435\u0439, \"\u0412\u0435\u0441\u0442\u0438 \u0438\u0437 \u041f\u0430\u043b\u0435\u0439\"\n\ud83d\udd38 \u041c\u0430\u043a\u0441\u0438\u043c \u0425\u0430\u0440\u0430\u0441\u043a, \"Global Digital Space\"\n\n00:00 \u0417\u0434\u043e\u0440\u043e\u0432\u0430\u0435\u043c\u0441\u044f, \u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043f\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430\u043c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\n02:18 \u0421\u0430\u0448\u0430 \u0432\u044b\u0448\u0435\u043b \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 Positive Technologies \u0438 \u0447\u0435\u043c \u0436\u0435 \u043e\u043d \u0442\u0430\u043c \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f\n04:50 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim (CVE-2023-42115)\n08:16 SSRF/RCE \u0432 TorchServe (CVE-2023-43654, CVE-2022-1471), ShellTorch\n12:05 \u0412 Cisco Emergency Responder \u043d\u0430\u0448\u043b\u0438 root-\u043e\u0432\u044b\u0435 \u0443\u0447\u0451\u0442\u043a\u0438 \u0441 \u0437\u0430\u0445\u0430\u0440\u0434\u043a\u043e\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 (CVE-2023-20101)\n16:44 \u041d\u043e\u0432\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OpenPubkey\n17:56 EoP \u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Atlassian Confluence (CVE-2023-22515)\n23:42 \u0413\u0440\u044f\u0434\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c cURL \u0438 libcurl (CVE-2023-38545)\n27:07 \u041d\u043e\u0432\u0430\u044f bug bounty \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b\n30:32 \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0431\u0440\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \"\u041b\u0435\u043e\u043d\u0430\u0440\u0434\u043e\" \u0432\u043d\u043e\u0432\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c DDOS-\u0430\u0442\u0430\u043a\u0435 \u0438\u0437-\u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u0430\n35:22 \u042d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0430 Xiaomi \u0432\u044b\u0448\u043b\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u043f\u043e \u0432\u0441\u0435\u0439 \u0420\u043e\u0441\u0441\u0438\u0438\n36:38 Qualys-\u044b \u043d\u0430\u0440\u0435\u0441\u0435\u0440\u0447\u0438\u043b\u0438 EoP/LPE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u0435\u0445 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0430\u0445, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0432 glibc (CVE-2023-4911)\n39:19 XSpider-\u0443 25 \u043b\u0435\u0442. \u0420\u043e\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u043c\u0443 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c\u0443 Vulnerability Management-\u0443. \u041e\u0431\u0441\u0443\u0436\u0434\u0430\u0435\u043c \u0432 \u043a\u0430\u043a\u0443\u044e \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VM.\n46:42 \u041f\u0440\u043e\u0449\u0430\u043d\u0438\u0435 \u043e\u0442 Mr. X\n\n@avleonovrus #\u041f\u0440\u043e\u0436\u0435\u043a\u0442\u043e\u0440\u041f\u043e\u0418\u0411 #PositiveTechnologies #Exim #TorchServe #Cisco #OpenPubkey #Atlassian #Confluence #cURL #libcurl #bugbounty #\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b #\u041b\u0435\u043e\u043d\u0430\u0440\u0434\u043e #Xiaomi #Qualys #Linux #glibc #XSpider #VulnerabilityManagement #MaxPatrolVM", "url": "https://t.me/GDSpace/962"}, {"timestamp": "2023-10-09T22:00:00Z", "date_only": false, "value": "2023-10-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-10-09T22:21:04Z", "date_only": false, "value": "2023-10-09T22:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/71860", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "a27688fb-c124-46ad-ae28-68ecdc3f96ab", "content": "\ud83d\udd74 'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits \ud83d\udd74\n\nFollowing the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/71860"}, {"timestamp": "2023-10-10T13:37:00Z", "date_only": false, "value": "2023-10-10T13:37:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9b6wG6Il7-Fs6fbMdT7ZuXLkWZY4c8ncON5lXsj9jLiXJkM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "96ec2a6a-3a27-4b8b-b24d-c9b9674ce48d"}, {"timestamp": "2023-10-10T13:38:49Z", "date_only": false, "value": "2023-10-10T13:38:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5349", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "26c8ba51-48c9-43a9-858c-01bcb746ca34", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-4911\nURL\uff1ahttps://github.com/silent6trinity/looney-tuneables\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5349"}, {"timestamp": "2023-10-10T18:26:06Z", "date_only": false, "value": "2023-10-10T18:26:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1257", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "45223719-2777-47ea-8ee7-51d42b22f832", "content": "https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\ncve 2023-4911", "url": "https://t.me/CNArsenal/1257"}, {"timestamp": "2023-10-10T22:00:00Z", "date_only": false, "value": "2023-10-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-10-12T22:00:00Z", "date_only": false, "value": "2023-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-10-13T04:19:27Z", "date_only": false, "value": "2023-10-13T04:19:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/42", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "1a6d8e23-340d-4d00-8fcd-557815efe653", "content": "Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911)\n\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\nPOC: https://github.com/leesh3288/CVE-2023-4911", "url": "https://t.me/hackingbra/42"}, {"timestamp": "2023-10-13T08:52:19Z", "date_only": false, "value": "2023-10-13T08:52:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11719", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e251d583-1ae8-4417-8ed6-042c06832c80", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 PoC of CVE-2023-4911 \"Looney Tunables\".\n\nhttps://github.com/leesh3288/CVE-2023-4911\n\nhttps://github.com/RickdeJager/CVE-2023-4911", "url": "https://t.me/cKure/11719"}, {"timestamp": "2023-10-13T11:06:10Z", "date_only": false, "value": "2023-10-13T11:06:10Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1723", "record": "OESA-2023-1723", "field": "published"}, {"timestamp": "2023-10-13T11:06:10Z", "date_only": false, "value": "2023-10-13T11:06:10Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1724", "record": "OESA-2023-1724", "field": "published"}, {"timestamp": "2023-10-13T11:06:10Z", "date_only": false, "value": "2023-10-13T11:06:10Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1725", "record": "OESA-2023-1725", "field": "published"}, {"timestamp": "2023-10-13T16:09:01Z", "date_only": false, "value": "2023-10-13T16:09:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/292", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "a22c0706-dbd5-4985-b5cb-9badba0c0f55", "content": "CVE-2023-4911\n: https://github.com/ruycr4ft/CVE-2023-4911 \nExploiter (Python3): https://haxx.in/files/gnu-acme.py", "url": "https://t.me/v3n0mhack/292"}, {"timestamp": "2023-10-14T02:33:41Z", "date_only": false, "value": "2023-10-14T02:33:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5408", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "d53eaf75-aa99-4761-a73a-91f9538e1b75", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for CVE-2023-4911 LooneyTuneables\nURL\uff1ahttps://github.com/guffre/CVE-2023-4911\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5408"}, {"timestamp": "2023-10-14T21:01:59Z", "date_only": false, "value": "2023-10-14T21:01:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Redscriptteam/4443", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "ceb96e2e-3b8d-4cc5-b1d1-37e244ec5de5", "content": "#CVE-2023-4911\n\nPoC for CVE-2023-4911\n\nhttps://github.com/leesh3288/CVE-2023-4911", "url": "https://t.me/Redscriptteam/4443"}, {"timestamp": "2023-10-15T22:00:00Z", "date_only": false, "value": "2023-10-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-10-16T16:29:43Z", "date_only": false, "value": "2023-10-16T16:29:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/143379", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "b665b15f-59bf-4929-b2e8-174a10d7d4fa", "content": "https://ift.tt/IRkQTU8\nLooney Tunables? CVE-2023-4911? You might be using a vulnerable Linux distribution.", "url": "https://t.me/ctinow/143379"}, {"timestamp": "2023-10-17T08:37:59Z", "date_only": false, "value": "2023-10-17T08:37:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5461", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "456f87d4-d5c3-4bc6-a8cb-a786ddbe5054", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.\nURL\uff1ahttps://github.com/chaudharyarjun/LooneyPwner\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5461"}, {"timestamp": "2023-10-18T22:00:00Z", "date_only": false, "value": "2023-10-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-10-22T00:37:39Z", "date_only": false, "value": "2023-10-22T00:37:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DailyToolz/1049", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4d4cd425-9bce-43f6-8349-9eb47bc1d9e2", "content": "https://github.com/RickdeJager/CVE-2023-4911\n- @DailyToolz | share and support us.", "url": "https://t.me/DailyToolz/1049"}, {"timestamp": "2023-10-25T12:01:14Z", "date_only": false, "value": "2023-10-25T12:01:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5556", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "69daad68-961a-4dee-94dc-12165fee9305", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aLooney Tunables Local privilege escalation (CVE-2023-4911) workshop\nURL\uff1ahttps://github.com/KernelKrise/CVE-2023-4911-Looney-Tunables-\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5556"}, {"timestamp": "2023-10-25T12:07:29Z", "date_only": false, "value": "2023-10-25T12:07:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5557", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e00464cf-316e-42e8-b7d2-5f3a24c4a929", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aLooney Tunables Local privilege escalation (CVE-2023-4911) workshop\nURL\uff1ahttps://github.com/KernelKrise/CVE-2023-4911\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5557"}, {"timestamp": "2023-10-27T13:49:22Z", "date_only": false, "value": "2023-10-27T13:49:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/3187", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "be6f05b3-36d9-4e9f-b894-1d3bb2872cbf", "content": "Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability (https://www.kitploit.com/search/label/Vulnerability) in various Linux distributions.  LooneyPwner is a proof-of-concept (PoC) exploit tool targeting the critical buffer overflow (https://www.kitploit.com/search/label/Buffer%20Overflow) vulnerability, nicknamed \"Looney Tunables,\" found in the GNU C Library (glibc). This flaw, officially tracked as CVE-2023-4911, is present in various Linux distributions, posing significant risks, including unauthorized data access and system alterations.\n    The vulnerability in the GNU C Library (glibc) was disclosed last week, with notable security researchers and analysts releasing PoC exploits, indicating the potential for widespread attacks. The flaw, discovered by Qualys researchers, can grant attackers root privileges on various Linux distributions including Fedora, Ubuntu, and Debian.  Unauthorized root access provides attackers unrestricted authority, enabling them to:    Modify, delete, or steal sensitive data.  Install malicious software or backdoors.  Facilitate ongoing attacks that may remain undetected (https://www.kitploit.com/search/label/Undetected) for extended periods.  Cause data breaches, accessing customer data, intellectual property, and financial records.  Disrupt critical system operations, potentially causing service outages and harming an organization's reputation.      LooneyPwner exploits (https://www.kitploit.com/search/label/Exploits) the \"Looney Tunables\" flaw, targeting affected glibc versions. The tool:    Detects the installed glibc version.  Checks for vulnerability status.  Offers an option for exploitation (https://www.kitploit.com/search/label/Exploitation) if vulnerable.      chmod +x looneypwner.sh\n./looneypwner.sh  \n    This tool is intended for educational purposes and security research only. The user assumes all responsibility for any damages or misuse resulting from its use.    This exploit code is based on the work of leesh3288 (https://github.com/leesh3288/CVE-2023-4911). A big thanks to him for the foundational work on the exploit.  \n\nDownload LooneyPwner (https://github.com/chaudharyarjun/LooneyPwner)", "url": "https://t.me/ETHICALHACKERSCOMMUNITY2/3187"}, {"timestamp": "2023-10-27T21:10:22Z", "date_only": false, "value": "2023-10-27T21:10:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/3185", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "eec544c5-9839-475f-a3a1-b7a0a2161d0d", "content": "LooneyPwner - Exploit Tool For CVE-2023-4911, Targeting The 'Looney Tunables' Glibc Vulnerability In Various Linux Distributions\nhttp://www.kitploit.com/2023/10/looneypwner-exploit-tool-for-cve-2023.html", "url": "https://t.me/ETHICALHACKERSCOMMUNITY2/3185"}, {"timestamp": "2023-10-29T12:08:24Z", "date_only": false, "value": "2023-10-29T12:08:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5597", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5857281f-b4e5-4b56-bcb5-6db6cdfa212f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aProof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit \nURL\uff1ahttps://github.com/Diego-AltF4/CVE-2023-4911\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5597"}, {"timestamp": "2023-11-03T20:39:04Z", "date_only": false, "value": "2023-11-03T20:39:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/C76ai0_bgvZONqwqAe3DAeLx5rlYtLmUWaWBqGfpikou0T8", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "04a99c08-a401-4170-8694-1ffa3ae00c05"}, {"timestamp": "2023-11-06T09:55:49Z", "date_only": false, "value": "2023-11-06T09:55:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/3613", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7c572ad6-7474-4375-9ae8-e62c8f169e75", "content": "\u200b\u26a1\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b Kinsing \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 Looney Tunables \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n \ud83d\udcac\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Kinsing, \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u043a\u0430\u043a Looney Tunables ( CVE-2023-4911 ), \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 AquaSec.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0437\u043d\u0430\u043c\u0435\u043d\u0443\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Looney Tunables, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n\u041d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHPUnit ( CVE-2017-9841 ), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u042d\u0442\u043e\u0442 \u043f\u043e\u0434\u0445\u043e\u0434 \u0432 Kinsing \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2021 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 Python, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c bl4sty 5-\u0433\u043e \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b Kinsing \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 PHP-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u0434\u0435\u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0438\u0437 \u0441\u0435\u0431\u044f JavaScript, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0414\u0430\u043d\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438 \u2014 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u043e\u0442\u0445\u043e\u0434\u0438\u0442 \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b Kinsing, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0432\u0448\u0435\u0439\u0441\u044f \u0432 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u0438 \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u044b\u043c\u0438, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3613"}, {"timestamp": "2023-11-06T21:41:52Z", "date_only": false, "value": "2023-11-06T21:41:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/18829", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "ffcc7828-3610-49ac-b285-e8d6cee56122", "content": "\u200aHackers exploit Looney Tunables Linux bug, steal cloud creds\n\nThe operators of the Kinsing malware are targeting cloud environments with systems vulnerable to \"Looney Tunables,\" a Linux security issue\u00a0identified as CVE-2023-4911 that allows a local attacker to gain root privileges on the system. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-looney-tunables-linux-bug-steal-cloud-creds/", "url": "https://t.me/BleepingComputer/18829"}, {"timestamp": "2023-11-07T15:38:29Z", "date_only": false, "value": "2023-11-07T15:38:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4afe8f7d-ae7a-40d0-868a-7c6878f2a87e", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "3db7f3e3-aeab-4226-849c-63dcf0d7f291"}, {"timestamp": "2023-11-08T09:42:13Z", "date_only": false, "value": "2023-11-08T09:42:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5722", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "9b264db3-b017-4176-8d4b-d08d2617ca8c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aLooney Tunables CVE-2023-4911\nURL\uff1ahttps://github.com/teraGL/looneyCVE\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5722"}, {"timestamp": "2023-11-08T15:37:39Z", "date_only": false, "value": "2023-11-08T15:37:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/14951", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "cf2e03b7-d3e3-4915-89b7-7a92db108ba5", "content": "Linux-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Looney Tunables \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Kinsing \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u0430\u043b\u0432\u0430\u0440\u0438 Kinsing \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043f\u0435\u0440\u0435\u0434 \u0441\u0432\u0435\u0436\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 Looney Tunables. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-4911 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nhttps://xakep.ru/2023/11/08/looney-tunables-kinsing/", "url": "https://t.me/xakep_ru/14951"}, {"timestamp": "2023-11-12T10:54:02Z", "date_only": false, "value": "2023-11-12T10:54:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CherepawwkaChannel/205", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "44e3ff1f-774a-414b-8845-f5e4392c287e", "content": "\u0412\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0437\u0430\u043c\u0435\u0442\u043a\u0430 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 glibc Looney Tunables (CVE-2023-4911) \n\u0420\u0435\u0431\u044f\u0442\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c: https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\u0412\u0435\u0440\u0441\u0438\u044f glibc, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c: 2.34\n\u0421\u0430\u043c\u0430\u044f \u0441\u0432\u0435\u0436\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Debian \u0438 Ubuntu (2.35+) \u0443\u0436\u0435 \u0441 \u0444\u0438\u043a\u0441\u043e\u043c\n\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e:\nldd --version\nPoC:\nenv -i \"GLIBC_TUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A\" \"Z=`printf '%08192x' 1`\" /usr/bin/su --help\n\u0415\u0441\u043b\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c Segmentation fault, \u0442\u043e \u0432\u0441\u0451 \u043f\u043b\u043e\u0445\u043e.\n\u0415\u0441\u043b\u0438 \u0432\u0438\u0434\u0438\u043c \u043e\u0431\u044b\u0447\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 su --help, \u0442\u043e \u0432\u0441\u0451 \u0432\u0440\u043e\u0434\u0435 \u0445\u043e\u0440\u043e\u0448\u043e.\n\n\u0412\u0435\u0440\u0441\u0438\u044f 2.28 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0435\u0441\u043b\u0438 \u0441\u0443\u0434\u0438\u0442\u044c \u043f\u043e \u044d\u0442\u043e\u043c\u0443: https://access.redhat.com/security/cve/cve-2023-4911\n\nPoC \u043d\u0430 GitHub:\nhttps://github.com/leesh3288/CVE-2023-4911\nhttps://github.com/RickdeJager/CVE-2023-4911\nhttps://haxx.in/files/gnu-acme.py\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432 \u0446\u0435\u043b\u044f\u0445 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0435\u0441\u0430\u043d\u00ad\u043a\u0446\u0438\u00ad\u043e\u043d\u0438\u00ad\u0440\u043e\u0432\u0430\u043d\u00ad\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0435 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u00ad\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0438\u0441\u00ad\u0442\u0435\u043c, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0441\u00ad\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c\u00ad\u0441\u044f \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443.\n\n\u041f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0436\u0443\u0441\u044c \u0432 \u0440\u0430\u0437\u0434\u0443\u043c\u044c\u044f\u0445 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u043e\u0440\u0440\u0435\u043b\u044f\u0446\u0438\u0438. \u0418\u0437 \u0438\u0434\u0435\u0439 \u043f\u043e\u043a\u0430 \u0442\u0430\u043a:\n\nevent Start_Same_Process:\n    key:\n        event_src.host, object.process.name, subject.account.session_id, subject.account.name, subject.account.id\n    filter {\n        filter::NotFromCorrelator()\n    and filter::OperatingSystem_UNIXLike()\n        and msgid == \"execve\"\n        and object == \"process\"\n        and action == \"start\"\n        and object.process.name == \"su\"  # \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u044b\n        and filter::CheckWL_Specific_Only(\"Possible_Looney_Tunables_exploitation\", join([event_src.host, subject.account.id, object.process.name], \"|\"))\n    }\n\nrule Possible_Looney_Tunables_exploitation: (Start_Same_Process[50,]) timer 10s\n\n\u0412 \u0438\u0434\u0435\u0430\u043b\u0435 \u0434\u043e\u0431\u0438\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442 \u0434\u043e rule Possible_Successful_Looney_Tunables_exploitation: (Start_Same_Process[50,]) timer 10s -> Spawn_Interactive_Shell, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u043a\u0430\u043a \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0441\u043f\u0430\u0432\u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0448\u0435\u043b\u043b\u0430.", "url": "https://t.me/CherepawwkaChannel/205"}, {"timestamp": "2023-11-13T23:00:00Z", "date_only": false, "value": "2023-11-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-17T00:00:00Z", "date_only": false, "value": "2023-11-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0957", "record": "CERTFR-2023-AVI-0957", "field": "last_revision_date"}, {"timestamp": "2023-11-17T00:00:00Z", "date_only": false, "value": "2023-11-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0957", "record": "CERTFR-2023-AVI-0957", "field": "initial_release_date"}, {"timestamp": "2023-11-17T00:00:00Z", "date_only": false, "value": "2023-11-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0957", "record": "CERTFR-2023-AVI-0957", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "timestamps.asserted_at", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-4911", "field": "timestamps.asserted_at", "uuid": "eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": true, "value": "2023-11-21", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4911", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-4911", "field": "evidence.0.details.added_date", "uuid": "eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": true, "value": "2023-11-21", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "evidence.0.details.date_added", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "timestamps.first_seen_at", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-4911", "field": "timestamps.first_seen_at", "uuid": "eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "status.status_updated_at", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-4911", "field": "status.status_updated_at", "uuid": "eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-21T00:00:00Z", "date_only": false, "value": "2023-11-21T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4911", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-11-21T18:10:02Z", "date_only": false, "value": "2023-11-21T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5e181e0d-1354-47b9-9a17-6eb34de1ef1a"}, {"timestamp": "2023-11-22T22:39:10Z", "date_only": false, "value": "2023-11-22T22:39:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/363", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "0fa9e8a3-2c2e-4269-a059-1bdddc0c9979", "content": "#ExploitObserverAlert\n\nCVE-2023-4911\n\nDESCRIPTION: Exploit Observer has 178 entries related to CVE-2023-4911. A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nFIRST-EPSS: 0.018070000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/363"}, {"timestamp": "2023-11-22T23:10:12Z", "date_only": false, "value": "2023-11-22T23:10:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Hf2Yd-qzy1GIe-P5j22BYiVqvoJdTpZ0raHmggM7-I_6rw", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "ca6838ba-0b22-430e-9107-cea6290c282d"}, {"timestamp": "2023-11-28T14:04:36Z", "date_only": false, "value": "2023-11-28T14:04:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/650", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "969430e3-6b80-4f51-ac43-b776d29baad9", "content": "#ExploitObserverAlert\n\nCVE-2023-4911\n\nDESCRIPTION: Exploit Observer has 238 entries related to CVE-2023-4911. A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nFIRST-EPSS: 0.018070000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/650"}, {"timestamp": "2023-12-02T03:28:57Z", "date_only": false, "value": "2023-12-02T03:28:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/890", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "212c0237-9fd6-4522-9f4c-7b7e6198a21b", "content": "#ExploitObserverAlert\n\nCVE-2023-4911\n\nDESCRIPTION: Exploit Observer has 238 entries related to CVE-2023-4911. A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nFIRST-EPSS: 0.018070000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/890"}, {"timestamp": "2023-12-10T18:18:37Z", "date_only": false, "value": "2023-12-10T18:18:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6132", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "3e5f810f-299c-44ce-8137-183d86bbb453", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC of CVE-2023-4911\nURL\uff1ahttps://github.com/snurkeburk/Looney-Tunables\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6132"}, {"timestamp": "2023-12-11T14:31:46Z", "date_only": false, "value": "2023-12-11T14:31:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1755", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "b917aa37-2783-463e-9d1b-4bde279d6e1e", "content": "#ExploitObserverAlert\n\nCVE-2023-4911\n\nDESCRIPTION: Exploit Observer has 237 entries related to CVE-2023-4911. A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.\n\nFIRST-EPSS: 0.018070000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1755"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": true, "value": "2023-12-12", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "evidence.0.details.due_date", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1015", "record": "CERTFR-2023-AVI-1015", "field": "last_revision_date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1015", "record": "CERTFR-2023-AVI-1015", "field": "initial_release_date"}, {"timestamp": "2023-12-12T00:00:00Z", "date_only": false, "value": "2023-12-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1015", "record": "CERTFR-2023-AVI-1015", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:20:27.111Z", "date_only": false, "value": "2023-12-13T01:20:27.111788Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-4911", "record": "GSD-2023-4911", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T19:21:40Z", "date_only": false, "value": "2023-12-20T19:21:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_tunables_priv_esc.rb", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "d1bcf361-0e12-4d9d-8113-c474fb0a0172", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/glibc_tunables_priv_esc.rb"}, {"timestamp": "2023-12-28T09:09:18Z", "date_only": false, "value": "2023-12-28T09:09:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/8291", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "18497d0c-a4c0-43aa-8104-b8c2764ce922", "content": "\u200aLooking into the Looney Tunable Linux Privesc CVE-2023-4911\n\nhttps://www.youtube.com/watch?v=1iV-CD9Apn8", "url": "https://t.me/YouPentest/8291"}, {"timestamp": "2023-12-28T09:09:18Z", "date_only": false, "value": "2023-12-28T09:09:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/8296", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "13acfb2a-b9fa-4f65-b0aa-5039546ce376", "content": "\u200aCVE-2023-4911 Glibc Linux Privilege Escalation | Update Your Linux Now !\n\nhttps://www.youtube.com/watch?v=lv4e742FR_8", "url": "https://t.me/YouPentest/8296"}, {"timestamp": "2023-12-28T09:09:18Z", "date_only": false, "value": "2023-12-28T09:09:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/8302", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "750abd10-7eb7-4a7e-8654-fb9749ea9770", "content": "\u200aCVE-2023-4911 Looney Tunables Glibc Linux Privilege Escalation | Update Your Linux Now !\n\nhttps://www.youtube.com/watch?v=lv4e742FR_8", "url": "https://t.me/YouPentest/8302"}, {"timestamp": "2024-01-03T14:10:38Z", "date_only": false, "value": "2024-01-03T14:10:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-03T14:10:38Z", "date_only": false, "value": "2024-01-03T14:10:38+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-01-03T14:10:38Z", "date_only": false, "value": "2024-01-03T14:10:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-03T23:00:00Z", "date_only": false, "value": "2024-01-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": false, "value": "2024-01-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": false, "value": "2024-01-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-02-07T16:42:06Z", "date_only": false, "value": "2024-02-07T16:42:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/180825", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "cf73d819-410b-4eb2-994d-f3e5ac34451d", "content": "https://ift.tt/C4ayTwf\nCVE-2023-4911 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Signaling Local Privilege Escalation", "url": "https://t.me/ctinow/180825"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-02-22T20:18:58.020Z", "date_only": false, "value": "2024-02-22T20:18:58.020", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-4911", "record": "GSD-2023-4911", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-166-10", "record": "ICSA-23-166-10", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-23-166-11", "record": "ICSA-23-166-11", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-831302", "record": "SSA-831302", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-03T00:00:00Z", "date_only": false, "value": "2024-07-03T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-07-03T22:00:00Z", "date_only": false, "value": "2024-07-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2024-08-15T18:03:43.880Z", "date_only": false, "value": "2024-08-15T18:03:43.880+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0106", "record": "WID-SEC-W-2024-0106", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:32:34Z", "date_only": false, "value": "2024-08-16T08:32:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1295", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "2c110ce5-3210-4d95-a9b4-d295ca62fb26", "content": "Local Privilege Escalation in the glibc's ld.so (CVE-2023-4911)\n\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n\nPOC: https://github.com/leesh3288/CVE-2023-4911\n\n#expdev #linux #lpe #Alexs3y", "url": "https://t.me/Rootsec_2/1295"}, {"timestamp": "2024-10-14T15:50:35.983Z", "date_only": false, "value": "2024-10-14T15:50:35.983245Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "88865434-e898-4ccd-a6c0-ebc3b34ec24e", "url": "https://vulnerability.circl.lu/bundle/92582bf5-d92c-47fe-b891-656d271bbfef"}, {"timestamp": "2024-12-03T08:39:24.953Z", "date_only": false, "value": "2024-12-03T08:39:24.953Z", "kind": "other", "label": "Document generated", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-09T11:00:00Z", "date_only": false, "value": "2024-12-09T11:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-09T11:00:00Z", "date_only": false, "value": "2024-12-09T11:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-24T20:35:44.062Z", "date_only": false, "value": "2024-12-24T20:35:44.062128Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971926", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "536c941e-87e4-4d0d-85d6-026c70227fe6", "url": "https://feedsin.space/feed/CISAKevBot/items/2971926"}, {"timestamp": "2025-01-09T15:31:50Z", "date_only": false, "value": "2025-01-09T15:31:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tradebot-elastic/0443cfb5016bed103f1940b2f336e45a", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "0447560e-c4f0-4e99-b946-3376ab30ae80", "url": "https://gist.github.com/tradebot-elastic/0443cfb5016bed103f1940b2f336e45a"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "1b521eae-3e35-4bde-acce-970cacfeeef8"}, {"timestamp": "2025-02-18T22:00:05Z", "date_only": false, "value": "2025-02-18T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DjajqwOKtfZ_M5ClV_Ht6Zj14zVZ5RqpF76L3bZ8ar0sOu4", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "984fd80c-eac2-4e4f-a49d-dfef12aaa30e"}, {"timestamp": "2025-02-23T02:10:49Z", "date_only": false, "value": "2025-02-23T02:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5e1e9ef3-4f7f-4efb-8618-36c96938e0dc"}, {"timestamp": "2025-02-23T04:10:58Z", "date_only": false, "value": "2025-02-23T04:10:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "2c92c863-973d-41be-8ff9-4a61f8f72311"}, {"timestamp": "2025-03-06T10:00:05Z", "date_only": false, "value": "2025-03-06T10:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s35AMqhqtadEqpjRxkI5cW3sPSrTin72JMblREttZD-iDXg", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "03a06ceb-28ab-4a94-ae1d-13741860ce9a"}, {"timestamp": "2025-03-26T11:22:00Z", "date_only": false, "value": "2025-03-26T11:22:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-22T13:03:10Z", "date_only": false, "value": "2025-05-22T13:03:10.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-22T13:03:10Z", "date_only": false, "value": "2025-05-22T13:03:10.000Z", "kind": "other", "label": "Updated", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2024-073", "record": "VDE-2024-073", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-05T14:45:00Z", "date_only": false, "value": "2025-06-05T14:45:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": true, "value": "2025-06-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0492", "record": "CERTFR-2025-AVI-0492", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2025-06-10T22:00:00Z", "date_only": false, "value": "2025-06-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0492", "record": "CERTFR-2025-AVI-0492", "field": "last_revision_date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0492", "record": "CERTFR-2025-AVI-0492", "field": "initial_release_date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0492", "record": "CERTFR-2025-AVI-0492", "field": "revisions.0.revision_date"}, {"timestamp": "2025-06-11T06:22:53.258Z", "date_only": false, "value": "2025-06-11T06:22:53.258+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2543", "record": "WID-SEC-W-2023-2543", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-12T10:00:00Z", "date_only": false, "value": "2025-06-12T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "9135eb48-f402-4f1f-b266-7bf80296a08c", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-08-31T03:00:50Z", "date_only": false, "value": "2025-08-31T03:00:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "f77c0605-3da6-4142-8510-cf5a93bcabdb"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": true, "value": "2025-09-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "last_revision_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "initial_release_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0756", "record": "CERTFR-2025-AVI-0756", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-08T00:00:00Z", "date_only": true, "value": "2025-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0855", "record": "CERTFR-2025-AVI-0855", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0855", "record": "CERTFR-2025-AVI-0855", "field": "last_revision_date"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0855", "record": "CERTFR-2025-AVI-0855", "field": "initial_release_date"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0855", "record": "CERTFR-2025-AVI-0855", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-15T19:45:35.724Z", "date_only": false, "value": "2025-10-15T19:45:35.724824Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4911", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-15T19:45:35.724Z", "date_only": false, "value": "2025-10-15T19:45:35.724824Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4911", "record": "FKIE_CVE-2023-4911", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-19T16:31:16.569Z", "date_only": false, "value": "2025-10-19T16:31:16.569123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3kpzig3zs2i", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4c50d224-3040-4d64-9770-fd09018ec590", "url": "https://bsky.app/profile/gcpweekly.bsky.social/post/3m3kpzig3zs2i"}, {"timestamp": "2025-10-21T23:05:35.687Z", "date_only": false, "value": "2025-10-21T23:05:35.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4911", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-23T21:13:02Z", "date_only": false, "value": "2025-10-23T21:13:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "6469af86-1d4f-4ec8-a3d3-4c31f14d8f40"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "last_revision_date"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0969", "record": "CERTFR-2025-AVI-0969", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-16T03:39:35Z", "date_only": false, "value": "2025-12-16T03:39:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Metis-Intel/b94dbfe682c0d50d18e127d4891208cb", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "cf6bcd88-8a03-48ef-b445-24671d23b086", "url": "https://gist.github.com/Metis-Intel/b94dbfe682c0d50d18e127d4891208cb"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-14T22:00:07.322Z", "date_only": false, "value": "2026-01-14T22:00:07.322959Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-02T12:26:45.671Z", "date_only": false, "value": "2026-02-02T12:26:45.671500Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/592b525e-7883-444e-b2e9-359de1814d5f", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "84fed991-a657-4783-afeb-bd8cbe0836e9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/592b525e-7883-444e-b2e9-359de1814d5f"}, {"timestamp": "2026-02-02T12:26:45.671Z", "date_only": false, "value": "2026-02-02T12:26:45.671500Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/592b525e-7883-444e-b2e9-359de1814d5f", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e7db6317-b8c8-476b-99b3-67c4f27718d9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/592b525e-7883-444e-b2e9-359de1814d5f"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-4911", "field": "timestamps.recorded_at", "uuid": "7b65c447-ff04-4129-9281-e31ee28a0894", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T17:25:54.427Z", "date_only": false, "value": "2026-02-05T17:25:54.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "cve-2023-4911", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-11T10:01:07.471Z", "date_only": false, "value": "2026-02-11T10:01:07.471479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mel7tppqlf2p", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "af981cb4-364d-4537-8e1b-10804ad2ab9d", "url": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mel7tppqlf2p"}, {"timestamp": "2026-02-12T07:00:00Z", "date_only": false, "value": "2026-02-12T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-02-12T21:03:13.190Z", "date_only": false, "value": "2026-02-12T21:03:13.190439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccq2tv2k", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4810dfba-5209-4dfe-b524-f79264fd7abc", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccq2tv2k"}, {"timestamp": "2026-02-13T17:01:57.799Z", "date_only": false, "value": "2026-02-13T17:01:57.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-4911", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-18T03:10:06Z", "date_only": false, "value": "2026-02-18T03:10:06.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-18T03:10:06Z", "date_only": false, "value": "2026-02-18T03:10:06.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-18T11:57:00.935Z", "date_only": false, "value": "2026-02-18T11:57:00.935Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-4911", "record": "MSRC_CVE-2023-4911", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "last_revision_date"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": true, "value": "2026-02-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0218", "record": "CERTFR-2026-AVI-0218", "field": "revisions.0.revision_date"}, {"timestamp": "2026-03-02T06:28:34.891Z", "date_only": false, "value": "2026-03-02T06:28:34.891Z", "kind": "other", "label": "Document generated", "source": "csaf_endresshauserag \u00b7 VDE-2026-002", "record": "VDE-2026-002", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-02T07:00:00Z", "date_only": false, "value": "2026-03-02T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_endresshauserag \u00b7 VDE-2026-002", "record": "VDE-2026-002", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-02T07:00:00Z", "date_only": false, "value": "2026-03-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_endresshauserag \u00b7 VDE-2026-002", "record": "VDE-2026-002", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-02T07:00:00Z", "date_only": false, "value": "2026-03-02T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_endresshauserag \u00b7 VDE-2026-002", "record": "VDE-2026-002", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-02T07:01:24.244Z", "date_only": false, "value": "2026-03-02T07:01:24.244332Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/116158292538427831", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "74cbdd1f-145a-4d86-b0de-cea8e53f7ce1", "url": "https://infosec.exchange/users/certvde/statuses/116158292538427831"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-04-22T07:45:07Z", "date_only": false, "value": "2026-04-22T07:45:07Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-4911", "record": "UBUNTU-CVE-2023-4911", "field": "modified"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-05-12T12:31:29Z", "date_only": false, "value": "2026-05-12T12:31:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M77W-6VJW-WH2F", "record": "GHSA-M77W-6VJW-WH2F", "field": "modified"}, {"timestamp": "2026-05-13T15:52:08.130Z", "date_only": false, "value": "2026-05-13T15:52:08.130074Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-162-05", "record": "ICSA-25-162-05", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-29T07:12:04.132Z", "date_only": false, "value": "2026-05-29T07:12:04.132316Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "0214139b-8bc8-4ad8-9980-c54cf40e22a4", "url": "https://poliverso.org/objects/0477a01e-1122ebc0-12145c4779ccb07a"}, {"timestamp": "2026-06-05T08:34:51Z", "date_only": false, "value": "2026-06-05T08:34:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2206", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "b197cc7d-1dc4-43d3-bc87-8271afc5e7cd", "url": "https://t.me/kasperskyb2b/2206"}, {"timestamp": "2026-06-19T12:46:45.253Z", "date_only": false, "value": "2026-06-19T12:46:45.253833Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/75ae170d-5238-4d74-a292-855416824944", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5683c5e9-dc75-475a-a60b-ee215edd3a43", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/75ae170d-5238-4d74-a292-855416824944"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-4911", "field": "timestamps.recorded_at", "uuid": "eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:12.819Z", "date_only": false, "value": "2026-06-23T11:14:12.819353Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e81ccdb1-c399-45d1-9e77-f5775f28547d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb882a7c-6ed8-4e07-b5fa-a37bf8069a2e"}, {"timestamp": "2026-06-23T14:05:48.337Z", "date_only": false, "value": "2026-06-23T14:05:48.337220Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee9b5ea6-fd53-4a8e-a116-bb61810a426f", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "9e3d8e05-c86e-437e-af1c-12840d230e8d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee9b5ea6-fd53-4a8e-a116-bb61810a426f"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:5454", "record": "RHSA-2023:5454", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-03T01:55:49Z", "date_only": false, "value": "2026-07-03T01:55:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:5476", "record": "RHSA-2023:5476", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-03T01:57:09Z", "date_only": false, "value": "2026-07-03T01:57:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-03T01:57:09Z", "date_only": false, "value": "2026-07-03T01:57:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-03T01:57:09Z", "date_only": false, "value": "2026-07-03T01:57:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:0033", "record": "RHSA-2024:0033", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-03T08:17:56.417Z", "date_only": false, "value": "2026-07-03T08:17:56.417466Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tu-trinh-scale/dbff83b78ee580de9946817fe321ce6b", "record": "cve-2023-4911", "field": "creation_timestamp", "uuid": "438a7a76-e4ef-4293-a1d1-7e1c0fa0b3c0", "url": "https://gist.github.com/tu-trinh-scale/dbff83b78ee580de9946817fe321ce6b"}, {"timestamp": "2026-07-06T11:00:14.990Z", "date_only": false, "value": "2026-07-06T11:00:14.990352Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/95", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "d6e3d5ae-4a89-4887-9259-f71634ae3315", "url": "https://t.me/ZerodayAlert/95"}, {"timestamp": "2026-07-07T00:00:23.292Z", "date_only": false, "value": "2026-07-07T00:00:23.292630Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/95", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "3ff75dc4-aae5-4194-8a70-675646906dfc", "url": "https://t.me/ZerodayAlert/95"}, {"timestamp": "2026-07-12T04:00:04.454Z", "date_only": false, "value": "2026-07-12T04:00:04.454937Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/95", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "87a3b4e2-990e-4f2c-82b5-1b2b2edd0824", "url": "https://t.me/ZerodayAlert/95"}, {"timestamp": "2026-07-13T00:00:52.857Z", "date_only": false, "value": "2026-07-13T00:00:52.857242Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/95", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "2fa6c10d-8a8c-45df-bb68-ff9948384961", "url": "https://t.me/ZerodayAlert/95"}, {"timestamp": "2026-07-13T22:00:09.998Z", "date_only": false, "value": "2026-07-13T22:00:09.998820Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92400", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7d0ccf21-aeeb-404c-b5d2-43a0e147ea6f", "url": "https://t.me/GithubRedTeam/92400"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-07-14T00:00:18.561Z", "date_only": false, "value": "2026-07-14T00:00:18.561682Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92400", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "cd0bdb34-d38b-42fe-a0b1-4c9f777323c3", "url": "https://t.me/GithubRedTeam/92400"}, {"timestamp": "2026-07-15T00:00:31.676Z", "date_only": false, "value": "2026-07-15T00:00:31.676269Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92400", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "1b5ec27e-e29a-463d-a408-7ea5c3367bfd", "url": "https://t.me/GithubRedTeam/92400"}, {"timestamp": "2026-07-16T19:00:10.944Z", "date_only": false, "value": "2026-07-16T19:00:10.944332Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tYmsElsn9h--aUiAjXnDcQx9kxldzvlWhq7A7UpXPwomXD0", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "85bd5cae-2ce5-4c69-85e0-497f406a288c"}, {"timestamp": "2026-07-16T19:00:27.187Z", "date_only": false, "value": "2026-07-16T19:00:27.187750Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "f370b40d-ed06-4994-985c-a60e81182e9e"}, {"timestamp": "2026-07-17T00:00:26.612Z", "date_only": false, "value": "2026-07-17T00:00:26.612934Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tYmsElsn9h--aUiAjXnDcQx9kxldzvlWhq7A7UpXPwomXD0", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "50314d8c-c2f5-499e-a69e-cd766e21457c"}, {"timestamp": "2026-07-17T00:00:43.800Z", "date_only": false, "value": "2026-07-17T00:00:43.800312Z", "kind": "sighting", "label": "Seen", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "f356ab99-724a-4f38-9eef-7b073d48d99a"}, {"timestamp": "2026-07-17T11:00:08.885Z", "date_only": false, "value": "2026-07-17T11:00:08.885525Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/117", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "aa9257e7-fc9a-4514-a72d-0ad36ba367fc", "url": "https://t.me/cyberwarehouse/117"}, {"timestamp": "2026-07-17T11:00:09.018Z", "date_only": false, "value": "2026-07-17T11:00:09.018854Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4485d5d3-f844-485f-8010-bc30980905b8", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:07.951Z", "date_only": false, "value": "2026-07-18T00:00:07.951300Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JkDbnMq7GUm5Q4-RPLqs1gjre-Qc5RO5_Ni4r9-mJNxKuLM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "d30aad4e-d7e5-4922-8176-11eb64526fc6"}, {"timestamp": "2026-07-18T00:00:27.463Z", "date_only": false, "value": "2026-07-18T00:00:27.463171Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/117", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "8adc9a4c-e31e-4581-9511-942db5652069", "url": "https://t.me/cyberwarehouse/117"}, {"timestamp": "2026-07-18T00:00:27.534Z", "date_only": false, "value": "2026-07-18T00:00:27.534641Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "dd3b8389-4f2e-475d-a758-a8bedb75a6e0", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:45.630Z", "date_only": false, "value": "2026-07-18T00:00:45.630342Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tYmsElsn9h--aUiAjXnDcQx9kxldzvlWhq7A7UpXPwomXD0", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "31f75f45-3c48-4544-afcc-27fdfdaa21d6"}, {"timestamp": "2026-07-18T16:00:04.432Z", "date_only": false, "value": "2026-07-18T16:00:04.432783Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/devops40/203", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "6e40320a-67ca-4ba1-a031-a73b407ebf8b", "url": "https://t.me/devops40/203"}, {"timestamp": "2026-07-19T00:00:12.855Z", "date_only": false, "value": "2026-07-19T00:00:12.855156Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/devops40/203", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e0db4ce5-a4fa-4037-93cc-7265f6c0ece4", "url": "https://t.me/devops40/203"}, {"timestamp": "2026-07-26T02:02:19.985Z", "date_only": false, "value": "2026-07-26T02:02:19.985484Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2033", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "5ca29e1b-c969-4202-93d8-8e3f5f4d4891", "url": "https://t.me/EchelonEyes/2033"}, {"timestamp": "2026-07-26T07:01:48.457Z", "date_only": false, "value": "2026-07-26T07:01:48.457617Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/666", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "b50fe7f1-6e60-4bc3-ba03-f677df422aa2", "url": "https://t.me/zhatez/666"}, {"timestamp": "2026-07-27T00:00:57.290Z", "date_only": false, "value": "2026-07-27T00:00:57.290504Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2033", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "55aad7a8-32e4-48af-a131-d3108c726997", "url": "https://t.me/EchelonEyes/2033"}, {"timestamp": "2026-07-27T00:01:32.938Z", "date_only": false, "value": "2026-07-27T00:01:32.938511Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/666", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "314487e8-abf1-4f85-8c83-15fd1e5e1d71", "url": "https://t.me/zhatez/666"}, {"timestamp": "2026-07-28T00:00:29.669Z", "date_only": false, "value": "2026-07-28T00:00:29.669167Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/2033", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e5bb5139-5dbe-48d4-ab25-0ad5a79583d4", "url": "https://t.me/EchelonEyes/2033"}, {"timestamp": "2026-07-29T00:00:09.278Z", "date_only": false, "value": "2026-07-29T00:00:09.278645Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zhatez/666", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "c0e7d66b-9de0-480a-917d-23f86083dc1a", "url": "https://t.me/zhatez/666"}, {"timestamp": "2026-07-29T12:02:24.201Z", "date_only": false, "value": "2026-07-29T12:02:24.201952Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3790", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "cfa7994d-f90c-4500-91df-aa57e68db6e9", "url": "https://t.me/reverseame/3790"}, {"timestamp": "2026-07-29T12:02:25.549Z", "date_only": false, "value": "2026-07-29T12:02:25.549841Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3793", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "bc6922ca-a719-4afb-a77f-b5c9a74637c7", "url": "https://t.me/reverseame/3793"}, {"timestamp": "2026-07-29T12:03:07.372Z", "date_only": false, "value": "2026-07-29T12:03:07.372052Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2961", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e14bfbdd-0840-420c-803b-115032b8b555", "url": "https://t.me/cisoclub/2961"}, {"timestamp": "2026-07-29T20:11:56.689Z", "date_only": false, "value": "2026-07-29T20:11:56.689492Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "1dc00f98-0eb8-429a-80d8-64c8c7ec3bde", "url": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e"}, {"timestamp": "2026-07-30T00:02:26.462Z", "date_only": false, "value": "2026-07-30T00:02:26.462481Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3790", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "1fbac65e-036b-444f-aa2a-0889473368cc", "url": "https://t.me/reverseame/3790"}, {"timestamp": "2026-07-30T00:02:26.504Z", "date_only": false, "value": "2026-07-30T00:02:26.504570Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3793", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "e8c8b138-156d-491f-b413-7b3d082bcf11", "url": "https://t.me/reverseame/3793"}, {"timestamp": "2026-07-30T00:02:55.480Z", "date_only": false, "value": "2026-07-30T00:02:55.480378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2961", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "acb2582c-7b39-4af7-b8bb-c841bf7e0e28", "url": "https://t.me/cisoclub/2961"}, {"timestamp": "2026-08-02T12:00:03.649Z", "date_only": false, "value": "2026-08-02T12:00:03.649006Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3793", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "7b6eb538-1481-4f81-853f-987c67b06013", "url": "https://t.me/reverseame/3793"}, {"timestamp": "2026-08-02T12:00:03.694Z", "date_only": false, "value": "2026-08-02T12:00:03.694819Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3790", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "437b58af-aac9-49c9-ada0-862a66322d32", "url": "https://t.me/reverseame/3790"}, {"timestamp": "2026-08-03T02:07:11.098Z", "date_only": false, "value": "2026-08-03T02:07:11.098240Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3793", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "df2b6719-cd99-49be-b212-de8d9a183517", "url": "https://t.me/reverseame/3793"}, {"timestamp": "2026-08-03T02:07:11.145Z", "date_only": false, "value": "2026-08-03T02:07:11.145193Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3790", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "92477fe3-6150-4c76-af18-c86d0616c2c7", "url": "https://t.me/reverseame/3790"}, {"timestamp": "2026-08-03T19:00:05.005Z", "date_only": false, "value": "2026-08-03T19:00:05.005985Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2961", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "8ece3e86-78db-404e-a9be-74e91d2dba94", "url": "https://t.me/cisoclub/2961"}, {"timestamp": "2026-08-04T00:00:29.199Z", "date_only": false, "value": "2026-08-04T00:00:29.199039Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/2961", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4e873520-3726-4f06-81c1-53a9b3fb2a2b", "url": "https://t.me/cisoclub/2961"}, {"timestamp": "2026-08-06T11:06:10Z", "date_only": false, "value": "2026-08-06T11:06:10Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1723", "record": "OESA-2023-1723", "field": "modified"}, {"timestamp": "2026-08-06T11:06:10Z", "date_only": false, "value": "2026-08-06T11:06:10Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1724", "record": "OESA-2023-1724", "field": "modified"}, {"timestamp": "2026-08-06T11:06:10Z", "date_only": false, "value": "2026-08-06T11:06:10Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1725", "record": "OESA-2023-1725", "field": "modified"}, {"timestamp": "2026-09-01T17:00:07.153Z", "date_only": false, "value": "2026-09-01T17:00:07.153756Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/878", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "03fc74cd-090b-483f-a6f2-72744ad40ea3", "url": "https://t.me/Hackme_news/878"}, {"timestamp": "2026-09-01T17:00:17.187Z", "date_only": false, "value": "2026-09-01T17:00:17.187576Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7244", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "df35a9bc-0e73-4be5-ac88-0a23879226d5", "url": "https://t.me/cissp/7244"}, {"timestamp": "2026-09-01T20:00:44.777Z", "date_only": false, "value": "2026-09-01T20:00:44.777165Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124590", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "de9265a0-c517-4d40-9c3b-57c79712ff89", "url": "https://t.me/hacking_Attack/124590"}, {"timestamp": "2026-09-01T20:00:44.828Z", "date_only": false, "value": "2026-09-01T20:00:44.828791Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124592", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "f0030c47-0f94-490a-a76b-34d3d62dac25", "url": "https://t.me/hacking_Attack/124592"}, {"timestamp": "2026-09-01T20:00:44.876Z", "date_only": false, "value": "2026-09-01T20:00:44.876070Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124607", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "9c211c07-bf88-4458-b78a-f54d44d33b88", "url": "https://t.me/hacking_Attack/124607"}, {"timestamp": "2026-09-01T20:00:46.154Z", "date_only": false, "value": "2026-09-01T20:00:46.154919Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/122146", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "2589af77-9042-4d44-963d-52ad88898eae", "url": "https://t.me/hacking_Attack/122146"}, {"timestamp": "2026-09-01T20:00:46.417Z", "date_only": false, "value": "2026-09-01T20:00:46.417272Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/122087", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "a6bdd3b2-6705-408f-a08e-3f68214cff22", "url": "https://t.me/hacking_Attack/122087"}, {"timestamp": "2026-09-01T20:00:46.839Z", "date_only": false, "value": "2026-09-01T20:00:46.839037Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/121323", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "addd3874-2d86-4e03-9f80-cd1f977775c9", "url": "https://t.me/hacking_Attack/121323"}, {"timestamp": "2026-09-04T02:00:05.299Z", "date_only": false, "value": "2026-09-04T02:00:05.299814Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/124607", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "186ce587-523f-4cfb-b0a5-2dbeca800656", "url": "https://t.me/hacking_Attack/124607"}, {"timestamp": "2026-09-04T02:00:05.354Z", "date_only": false, "value": "2026-09-04T02:00:05.354874Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/124592", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "00dcb832-057d-440e-94a3-5921ecf2461b", "url": "https://t.me/hacking_Attack/124592"}, {"timestamp": "2026-09-04T02:00:05.412Z", "date_only": false, "value": "2026-09-04T02:00:05.412942Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/124590", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "478cb1c3-8ef9-4e1f-b2e1-2033d09cbe47", "url": "https://t.me/hacking_Attack/124590"}, {"timestamp": "2026-09-04T03:00:04.235Z", "date_only": false, "value": "2026-09-04T03:00:04.235599Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/122087", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "333430fd-77f1-4c53-8814-0ab168f8324e", "url": "https://t.me/hacking_Attack/122087"}, {"timestamp": "2026-09-04T03:00:04.513Z", "date_only": false, "value": "2026-09-04T03:00:04.513214Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/122146", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "aca01c81-31cc-4fe0-8271-3e724c104d16", "url": "https://t.me/hacking_Attack/122146"}, {"timestamp": "2026-09-04T04:00:07.102Z", "date_only": false, "value": "2026-09-04T04:00:07.102034Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/121323", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "423640c7-f1a8-457e-b068-b93a76e0d80d", "url": "https://t.me/hacking_Attack/121323"}, {"timestamp": "2026-09-06T08:00:05.656Z", "date_only": false, "value": "2026-09-06T08:00:05.656754Z", "kind": "sighting", "label": "Seen", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "201da030-eb36-4f9f-aeb6-9aa9e2d25192"}, {"timestamp": "2026-09-07T01:00:25.570Z", "date_only": false, "value": "2026-09-07T01:00:25.570613Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "2f453062-18f6-4866-8a19-92a169e7b96f"}, {"timestamp": "2026-09-08T22:00:04.459Z", "date_only": false, "value": "2026-09-08T22:00:04.459492Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Hackme_news/878", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "4ccf7046-a627-4030-af35-b5bc485c547d", "url": "https://t.me/Hackme_news/878"}, {"timestamp": "2026-09-09T20:00:06.349Z", "date_only": false, "value": "2026-09-09T20:00:06.349459Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7244", "record": "CVE-2023-4911", "field": "creation_timestamp", "uuid": "66c9b795-a0b5-4697-b786-73ffd143d31a", "url": "https://t.me/cissp/7244"}, {"timestamp": "2026-09-20T11:31:22Z", "date_only": false, "value": "2026-09-20T11:31:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:31:23Z", "date_only": false, "value": "2026-09-20T11:31:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:31:23Z", "date_only": false, "value": "2026-09-20T11:31:23Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2023:5455", "record": "RHSA-2023:5455", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:57:42Z", "date_only": false, "value": "2026-09-20T20:57:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:57:42Z", "date_only": false, "value": "2026-09-20T20:57:42Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13294-1", "record": "OPENSUSE-SU-2024:13294-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:27:30Z", "date_only": false, "value": "2026-10-11T11:27:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:27:30Z", "date_only": false, "value": "2026-10-11T11:27:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2023:5453", "record": "RHSA-2023:5453", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-082556", "record": "SSA-082556", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-794697", "record": "SSA-794697", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T21:45:37.956Z", "date_only": false, "value": "2026-10-14T21:45:37.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-4911", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T21:45:37.956Z", "date_only": false, "value": "2026-10-14T21:45:37.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "cve-2023-4911", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T22:17:18.373Z", "date_only": false, "value": "2026-10-14T22:17:18.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4911", "record": "FKIE_CVE-2023-4911", "field": "lastModified"}]}