Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 463
Alerts This Week
Warning Icon 1 463

Ubuntu 23.10 USN-6620-1 Critical: Glibc Local Code Execution Issue

ubuntu
Calendar Grey February 1, 2024
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-6620-1 pertains to vulnerabilities in glibc that may enable local users to gain elevated rights and run arbitrary code.
GNU C Library could be made to crash or run programs as an administrator if it handled a specially crafted request.

Summary

GNU C Library could be made to crash or run programs as an administrator

if it handled a specially crafted request.

Software Description:

- glibc: GNU C Library

Details:

It was discovered that the GNU C Library incorrectly handled the syslog()

function call. A local attacker could use this issue to execute arbitrary

code and possibly escalate privileges.

Topics%20covered

Topics Covered

security advisory security issue critical privilege escalation Ubuntu glibc local code execution

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   libc6                           2.38-1ubuntu6.1

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-6620-1

CVE-2023-6246, CVE-2023-6779, CVE-2023-6780

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6620-1

Topics%20covered

Topics Covered

security advisory security issue critical privilege escalation Ubuntu glibc local code execution

Package Information

https://launchpad.net/ubuntu/+source/glibc/2.38-1ubuntu6.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.