Category: glibc

glibc, grants, Technology

New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

technology

Jan 31, 2024NewsroomVulnerability / Endpoint Security Malicious local attackers can obtain full root access on Linux machines by taking advantage of a newly disclosed security flaw in the GNU C library (aka glibc). Tracked as CVE-2023-6246, the heap-based buffer overflow vulnerability is rooted in glibc’s __vsyslog_internal() function, which is used by syslog() and vsyslog() for

glibc, Linux, Technology

New Linux glibc flaw lets attackers get root on major distros

technology

​Unprivileged attackers can get root access on multiple major Linux distributions in default configurations by exploiting a newly disclosed local privilege escalation (LPE) vulnerability in the GNU C Library (glibc). Tracked as CVE-2023-6246, this security flaw was found in glibc’s __vsyslog_internal() function, called by the widely-used syslog and vsyslog functions for writing messages to the