DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2023-6780

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-6780

CGA ID

CGA-q3h7-jh38-v77w

Severity

5.3

Medium

CVSS V3

Description

An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images