CVE-2023-6246: Glibc: heap-based buffer overflow in __vsyslog_internal()
Gnu · glibc
Vendor fix available · Affected: Gnu glibc · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 92% of scored CVEs
DescriptionCVE.org
A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.
Affected products8
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- glibcVersions not stated
- Red Hat · Red Hat Enterprise Linux 6Versions not stated
- Red Hat · Red Hat Enterprise Linux 6Versions not stated
- Red Hat · Red Hat Enterprise Linux 7Versions not stated
- Red Hat · Red Hat Enterprise Linux 7Versions not stated
- Red Hat · Red Hat Enterprise Linux 8Versions not stated
- Red Hat · Red Hat Enterprise Linux 9Versions not stated
- Fedora · FedoraVersions not stated
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Gnu
- Published
- January 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2023-6246 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Weakness CWE-122cwe.mitre.org
- packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Rpacketstormsecurity.com
- packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Bufpacketstormsecurity.com
- seclists.org/fulldisclosure/2024/Feb/3seclists.org
- seclists.org/fulldisclosure/2024/Feb/5seclists.org
- access.redhat.com/security/cve/CVE-2023-6246access.redhat.com
- Issue trackerbugzilla.redhat.com
- lists.fedoraproject.org/archives/list/package-announce@lists.fedlists.fedoraproject.org
- lists.fedoraproject.org/archives/list/package-announce@lists.fedlists.fedoraproject.org
- security.gentoo.org/glsa/202402-01security.gentoo.org
- openwall.com/lists/oss-security/2024/01/30/6openwall.com
- qualys.com/2024/01/30/cve-2023-6246/syslog.txtqualys.com
- security.netapp.com/advisory/ntap-20240216-0007security.netapp.com
1 more reference is in the CVE record.