Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 23.04, 22.04 LTS USN-6409-1 Critical: Glibc Privilege Escalation

ubuntu
Calendar Grey October 3, 2023
Dist Ubuntu Esm H88
Vulnerabilities addressed in the GNU C Library for Ubuntu. Implement updates to mitigate risk of unauthorized access and denial-of-service threats.
Several security issues were fixed in GNU C Library.

Summary

Several security issues were fixed in GNU C Library.

Software Description:

- glibc: GNU C Library

Details:

It was discovered that the GNU C Library incorrectly handled the

GLIBC_TUNABLES environment variable. An attacker could possibly use this

issue to perform a privilege escalation attack. (CVE-2023-4911)

It was discovered that the GNU C Library incorrectly handled certain DNS

responses when the system was configured in no-aaaa mode. A remote attacker

could possibly use this issue to cause the GNU C Library to crash,

resulting in a denial of service. This issue only affected Ubuntu 23.04.

(CVE-2023-4527)

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation glibc ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   libc6                           2.37-0ubuntu2.1

Ubuntu 22.04 LTS:
   libc6                           2.35-0ubuntu3.4

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-6409-1

CVE-2023-4527, CVE-2023-4911

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6409-1

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation glibc ubuntu

Package Information

https://launchpad.net/ubuntu/+source/glibc/2.37-0ubuntu2.1
https://launchpad.net/ubuntu/+source/glibc/2.35-0ubuntu3.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here