USN-6541-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library was not properly handling certain memory operations. An attacker could possibly use this issue to cause a denial of service (application crash). (CVE-2023-4806, CVE-2023-4813) It was discovered that the GNU C library was not properly implementing a fix for CVE-2023-4806 in certain cases, which could lead to a memory leak. An attacker could possibly use this issue to cause a denial of service (application crash). This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-5156)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-6541-1.
What is the severity of USN-6541-1?
The severity of USN-6541-1 is not mentioned in the provided information.
What software is affected by USN-6541-1?
The software affected by USN-6541-1 is GNU C Library with specific versions of libc-bin and libc6 on Ubuntu versions 23.04, 22.04, 20.04, 18.04, and 16.04.
What is the impact of USN-6541-1?
USN-6541-1 could allow an attacker to cause a denial of service (application crash) due to improper handling of memory operations.
How do I fix USN-6541-1?
To fix USN-6541-1, you need to update the affected GNU C Library packages (libc-bin and libc6) to the recommended versions.