Vulnerability Details : CVE-2023-6246
Potential exploit
A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.
Vulnerability category: OverflowMemory CorruptionGain privilege
Products affected by CVE-2023-6246
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-6246
1.51%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-6246
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | 2024-01-31 |
8.4
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.5
|
5.9
|
Red Hat, Inc. | 2024-01-31 |
CWE ids for CVE-2023-6246
-
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().Assigned by: secalert@redhat.com (Secondary)
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2023-6246
-
http://packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Read-Write.html
glibc qsort() Out-Of-Bounds Read / Write ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
http://seclists.org/fulldisclosure/2024/Feb/5
Full Disclosure: Out-of-bounds read & write in the glibc's qsort()Exploit;Third Party Advisory
-
https://www.openwall.com/lists/oss-security/2024/01/30/6
oss-security - CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog()Exploit;Mailing List;Third Party Advisory
-
https://security.netapp.com/advisory/ntap-20240216-0007/
CVE-2023-6246 GNU C Library (glibc) Vulnerability in NetApp Products | NetApp Product Security
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/
[SECURITY] Fedora 39 Update: glibc-2.38-16.fc39 - package-announce - Fedora Mailing-ListsMailing List
-
http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
glibc syslog() Heap-Based Buffer Overflow ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://security.gentoo.org/glsa/202402-01
glibc: Multiple Vulnerabilities (GLSA 202402-01) — Gentoo securityThird Party Advisory
-
https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
Exploit;Third Party Advisory
-
http://seclists.org/fulldisclosure/2024/Feb/3
Full Disclosure: CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog()Exploit;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/
[SECURITY] Fedora 38 Update: glibc-2.37-18.fc38 - package-announce - Fedora Mailing-ListsMailing List
-
https://access.redhat.com/security/cve/CVE-2023-6246
CVE-2023-6246- Red Hat Customer PortalThird Party Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=2249053
2249053 – (CVE-2023-6246) CVE-2023-6246 glibc: heap-based buffer overflow in __vsyslog_internal()Issue Tracking;Third Party Advisory
Jump to