CVE-2023-6779: Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/glibcto a version that resolves this vulnerability.Fixed in 2.38-1ubuntu6.1 - Upgrade
Upgrade
ubuntu/glibcto a version that resolves this vulnerability.Fixed in 2.37-15 - Upgrade
Upgrade
debian/glibcto a version that resolves this vulnerability.Fixed in 2.28-10+deb10u1Fixed in 2.28-10+deb10u2Fixed in 2.31-13+deb11u8Fixed in 2.31-13+deb11u7Fixed in 2.36-9+deb12u4Fixed in 2.37-15Fixed in 2.37-17 - Upgrade
Upgrade
redhat/glibcto a version that resolves this vulnerability.Fixed in 2.39
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-6779?
CVE-2023-6779 has a high severity rating due to its potential to allow remote code execution via a heap-based buffer overflow.
How do I fix CVE-2023-6779?
To fix CVE-2023-6779, upgrade to glibc version 2.39 or later, or apply patches provided by your operating system vendor.
What versions of glibc are affected by CVE-2023-6779?
CVE-2023-6779 affects glibc versions 2.36 and 2.37, and prior versions before 2.39.
Is CVE-2023-6779 present in any Linux distributions?
Yes, CVE-2023-6779 is present in various Linux distributions that utilize vulnerable versions of the glibc library.
What are the potential consequences of exploiting CVE-2023-6779?
Exploiting CVE-2023-6779 can lead to unauthorized access and the ability to execute arbitrary code with elevated privileges.