Heap-based buffer overflow in GNU C Library (glibc) - CVE-2023-6246

Vulnerability identifier: #VU85932

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-6246

CWE-ID: CWE-122

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the __vsyslog_internal() function, which is called by both syslog() and vsyslog() while printing the SYSLOG_HEADER containing a long program name. A local user can pass a specially crafted input as arguments to the affected application, trigger a heap-based buffer overflow and execute arbitrary code on the system.

GNU C Library (glibc)
Gentoo Linux
Debian Linux
Anolis OS
Ubuntu
Fedora
Infrastructure Technology
glibc (Debian package)
glibc-gconv-extra
glibc-doc
nss_hesiod
nss_db
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-zh
glibc-langpack-en
glibc-devel
glibc-common
glibc-benchtests
glibc-all-langpacks
glibc
compat-libpthread-nonshared
sys-libs/glibc
libc6 (Ubuntu package)

Install updates from vendor's website.

glibc (Debian package) - update to 2.36-9+deb12u4
glibc-gconv-extra - update to 2.36-13
glibc-doc - update to 2.36-13
nss_hesiod - update to 2.36-13
nss_db - update to 2.36-13
libnsl - update to 2.36-13
glibc-utils - update to 2.36-13
glibc-static - update to 2.36-13
glibc-nss-devel - update to 2.36-13
glibc-minimal-langpack - update to 2.36-13
glibc-locale-source - update to 2.36-13
glibc-langpack-zh - update to 2.36-13
glibc-langpack-en - update to 2.36-13
glibc-devel - update to 2.36-13
glibc-common - update to 2.36-13
glibc-benchtests - update to 2.36-13
glibc-all-langpacks - update to 2.36-13
glibc - update to 2.36-13
compat-libpthread-nonshared - update to 2.36-13
glibc - addressed in versions 2.37-18.fc38, 2.38-16.fc39
sys-libs/glibc - update to 2.38-r10
libc6 (Ubuntu package) - update to 2.38-1ubuntu6.1

• Exploit #9877 - CVE-2023-6246 () (May 31, 2024)
• Exploit #9535 - CVE-2023-6246 (January 31, 2024)

• https://seclists.org/oss-sec/2024/q1/68

• Multiple vulnerabilities in GNU Glibc
• Fedora 38 update for glibc
• Fedora 39 update for glibc
• Ubuntu update for glibc
• Gentoo update for glibc
• Heap-based buffer overflow in Infrastructure Technology
• Debian update for glibc
• Anolis OS update for glibc