Vulnerabilitycritical

New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

The Hacker Newsby @TheHackersNewsFeb 2, 2024 · 04:52 UTC (Feb 2, 2024)1 min read4

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-6246 CVE-2023-6779 CVE-2023-6780 CVE-2023-4911

Tags: cve-2023-6246 cve-2023-6779 cve-2023-6780 cve-2023-4911 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-4911	Buffer Overflow in GNU C Library ld.so Grants Root via SUID Binaries	7.8	64%	KEVPoC ×6	Oct 3, 2023 KEV Nov 21, 2023
CVE-2023-6246 +2 related CVEs CVE-2023-6779 CVE-2023-6780	A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library	7.8 group max	5%	PoC ×6	Jan 31, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jan 31, 2024 Vulnerability / Endpoint Security Malicious local attackers can obtain full root access on Linux machines by taking advantage of a newly disclosed security flaw in the GNU C library (aka glibc). Tracked as CVE-2023-6246 (CVSS score: 7.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.