CVE-2023-6779

Summary

CVE-2023-6779 is a newly discovered heap-based buffer overflow vulnerability affecting the __vsyslog_internal function in the glibc library. This function is utilized by the syslog and vsyslog functions. The issue arises when these functions process messages larger than INT_MAX bytes, leading to an inaccurate calculation of the necessary buffer size. Consequently, the application crashes due to the buffer overflow. Notably, this vulnerability impacts glibc versions 2.37 and later.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.