Proof of concept for CVE-2023-4911 (Looney Tunables)

This vulnerability has been discovered by Qualys Threat Research Unit. Here you can read the advisory they published; it explains the vulnerability in depth.

The exploit has been tested on Ubuntu 22.04.2 LTS with GLIBC 2.35-0ubuntu3.1.

Testing the exploit

The makefile allows testing the exploit in the following scenarios:

1. With ASLR disabled (test).
2. With ASLR enabled (exploit)
3. Debugging the exploit (debug)

Demo

---

Kudos to leesh3288 for his exploit.