Do It by Code
54 subscribers
713 photos
99 videos
15 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog()
Article, Comments
Forwarded from Security Alerts (Amir)
https://nvd.nist.gov/vuln/detail/CVE-2023-6246 I'm done. Stop writing C code.
Forwarded from Security Alerts (Amir)
Security Alerts
https://nvd.nist.gov/vuln/detail/CVE-2023-6246 I'm done. Stop writing C code.
The discovery of vulnerabilities in the GNU C Library’s syslog and qsort functions raises major security concerns. The syslog vulnerability, a heap-based buffer overflow, can allow local users to gain full root access, impacting major Linux distributions. Similarly, the qsort vulnerability, stemming from a missing bounds check, can lead to memory corruption and has affected all glibc versions since 1992. These flaws highlight the critical need for strict security measures in software development, especially for core libraries widely used across many systems and applications.
Out-of-bounds read and write in the glibc's qsort() 1992-2024
Article, Comments