Lucene search

K
cvelistRedhatCVELIST:CVE-2023-6779
HistoryJan 31, 2024 - 2:07 p.m.

CVE-2023-6779 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

2024-01-3114:07:41
CWE-122
redhat
raw.githubusercontent.com
cve-2023-6779
__vsyslog_internal function
glibc 2.37
buffer overflow
application crash

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.7%

An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.