Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Ubuntu 23.10 USN-6620-1 Critical: Glibc Local Code Execution Issue

ubuntu
Calendar Grey February 1, 2024
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-6620-1 pertains to vulnerabilities in glibc that may enable local users to gain elevated rights and run arbitrary code.
GNU C Library could be made to crash or run programs as an administrator if it handled a specially crafted request.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 Summary: GNU C Library could be made to crash or run programs as an administrator if it handled a specially crafted request. Software Description: - glibc: GNU C Library Details: It was discovered that the GNU C Library incorrectly handled the syslog() function call. A local attacker could use this issue to execute arbitrary code and possibly escalate privileges.

Topics%20covered

Topics Covered

security advisory security issue critical privilege escalation Ubuntu glibc local code execution

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: libc6 2.38-1ubuntu6.1 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6620-1

CVE-2023-6246, CVE-2023-6779, CVE-2023-6780

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6620-1

Topics%20covered

Topics Covered

security advisory security issue critical privilege escalation Ubuntu glibc local code execution

Package Information

https://launchpad.net/ubuntu/+source/glibc/2.38-1ubuntu6.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here