CVE-2022-39046: Buffer Overflow
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-39046?
CVE-2022-39046 is an issue discovered in the GNU C Library (glibc) 2.36, where the syslog function can potentially reveal uninitialized memory from the heap.
What is the severity of CVE-2022-39046?
The severity of CVE-2022-39046 is high with a CVSS score of 5.3.
Which software versions are affected by CVE-2022-39046?
GNU glibc 2.36 and Apple macOS Ventura, Big Sur, and Monterey are affected by CVE-2022-39046.
How can CVE-2022-39046 be exploited?
CVE-2022-39046 can be exploited by passing a crafted input string larger than 1024 bytes to the syslog function.
Are there any fixes or patches available for CVE-2022-39046?
Yes, patches are available for CVE-2022-39046. Please refer to the references provided for more information.