Vulnerabilitymedium
Root access vulnerability in glibc library impacts many Linux distros
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-39046 | An issue was discovered in the GNU C Library (glibc) 2.36 | 5.3 | 2% | PoC | |
CVE-2023-6246+2 related CVEs | A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library | 7.8 group max | 5% | PoC ×6 |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha1 | 52a5be0df411ef3ff45c10c7c308cb92993d15b1 | g commit: https://sourceware.org/git?p=glibc.git;a=commit;h=52a5be0df411ef3ff45c10c7c308cb92993d15b1 and was also backported to glibc 2.36 because this commit w |
From the original article
1 min read at securityaffairs.com
Qualys researchers discovered a root access flaw, tracked as CVE-2023-6246, in GNU Library C (glibc) affecting multiple Linux distributions. The Qualys Threat Research Unit discovered four security vulnerabilities in the GNU Library C (glibc) , including a heap-based buffer overflow tracked as CVE-2023-6246.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.