CVE-2023-6246 Report - Details, Severity, & Advisories

CVE-2023-6246 is a high-severity heap-based buffer overflow vulnerability affecting the glibc library, specifically the \_\_vsyslog\_internal function. This issue occurs when certain conditions are met, such as the openlog function not being called or called with the ident argument set to NULL, and the program name being larger than 1024 bytes. Systems running glibc 2.36 and newer, including Debian, Ubuntu, and Fedora distributions, are affected by this vulnerability. Exploitation of this vulnerability could result in an application crash or local privilege escalation.

How do I know if I'm affected?

To determine if you're affected by the CVE-2023-6246 vulnerability, check if your system is running glibc versions 2.36 to 2.39 or Fedora 38 and 39. This vulnerability is a heap-based buffer overflow issue in the glibc library, specifically the \_\_vsyslog\_internal function. It can result in an application crash or local privilege escalation. Keep in mind that this issue is rated as high severity, so it's important to stay informed and take necessary precautions.

What should I do if I'm affected?

If you're affected by this vulnerability, it's crucial to update your system as soon as possible. First, check for available patches from your software provider. Next, apply the patches to your system to mitigate the vulnerability. Finally, monitor for any additional updates or advisories to ensure your system remains secure.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-6246 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity issue is a heap-based buffer overflow in the glibc library's \_\_vsyslog\_internal function. It was added to the National Vulnerability Database on January 31, 2024. No specific due date or required action is provided, but it's crucial to update your system and apply available patches to mitigate the vulnerability.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as two main issues: CWE-787 an out-of-bounds write in glibc's qsorT function and CWE-122 a heap-based buffer overflow in the \_\_vsyslog\_internal function.

For more details

CVE-2023-6246 is a high-severity vulnerability affecting the glibc library, with potential consequences including application crashes and local privilege escalation. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD or the resources listed below.

• Packet Storm: glibc qsort() Out-Of-Bounds Read / Write

• Packet Storm: glibc syslog() Heap-Based Buffer Overflow

• Full Disclosure: CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog()

• Full Disclosure: Out-of-bounds read & write in the glibc's qsort()