Off-by-one in GNU C Library (glibc) - CVE-2023-6779

Vulnerability identifier: #VU85934

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-6779

CWE-ID: CWE-193

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an off-by-one error within the __vsyslog_internal() function. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

GNU C Library (glibc)
Gentoo Linux
Debian Linux
Anolis OS
Ubuntu
Fedora
glibc (Debian package)
glibc-gconv-extra
glibc-doc
nss_hesiod
nss_db
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-minimal-langpack
glibc-locale-source
glibc-langpack-zh
glibc-langpack-en
glibc-devel
glibc-common
glibc-benchtests
glibc-all-langpacks
glibc
compat-libpthread-nonshared
sys-libs/glibc
libc6 (Ubuntu package)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

Install updates from vendor's website.

glibc (Debian package) - update to 2.36-9+deb12u4
glibc-gconv-extra - update to 2.36-13
glibc-doc - update to 2.36-13
nss_hesiod - update to 2.36-13
nss_db - update to 2.36-13
libnsl - update to 2.36-13
glibc-utils - update to 2.36-13
glibc-static - update to 2.36-13
glibc-nss-devel - update to 2.36-13
glibc-minimal-langpack - update to 2.36-13
glibc-locale-source - update to 2.36-13
glibc-langpack-zh - update to 2.36-13
glibc-langpack-en - update to 2.36-13
glibc-devel - update to 2.36-13
glibc-common - update to 2.36-13
glibc-benchtests - update to 2.36-13
glibc-all-langpacks - update to 2.36-13
glibc - update to 2.36-13
compat-libpthread-nonshared - update to 2.36-13
glibc - addressed in versions 2.37-18.fc38, 2.38-16.fc39
sys-libs/glibc - update to 2.38-r10
libc6 (Ubuntu package) - update to 2.38-1ubuntu6.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.4

• https://bugzilla.redhat.com/show_bug.cgi?id=2254395

• Multiple vulnerabilities in GNU Glibc
• Fedora 38 update for glibc
• Fedora 39 update for glibc
• Ubuntu update for glibc
• Gentoo update for glibc
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Debian update for glibc
• Anolis OS update for glibc