diff options
| author | Arjun Shankar <arjun@redhat.com> | 2024-01-30 19:29:45 +0100 |
|---|---|---|
| committer | Arjun Shankar <arjun@redhat.com> | 2024-01-30 19:32:59 +0100 |
| commit | 6cdc44214253a74e7140d75a7ebfc900820a5fa8 (patch) | |
| tree | 5b9cf90eaed0208c949ef05b821427632905c822 /advisories/GLIBC-SA-2024-0001 | |
| parent | ddf542da94caf97ff43cc2875c88749880b7259b (diff) | |
| download | glibc-6cdc44214253a74e7140d75a7ebfc900820a5fa8.tar.gz glibc-6cdc44214253a74e7140d75a7ebfc900820a5fa8.tar.xz glibc-6cdc44214253a74e7140d75a7ebfc900820a5fa8.zip | |
Document CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780
This commit adds "advisories" entries for the above three CVEs.
Diffstat (limited to 'advisories/GLIBC-SA-2024-0001')
| -rw-r--r-- | advisories/GLIBC-SA-2024-0001 | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/advisories/GLIBC-SA-2024-0001 b/advisories/GLIBC-SA-2024-0001 new file mode 100644 index 0000000000..28931c75ae --- /dev/null +++ b/advisories/GLIBC-SA-2024-0001 @@ -0,0 +1,15 @@ +syslog: Heap buffer overflow in __vsyslog_internal + +__vsyslog_internal did not handle a case where printing a SYSLOG_HEADER +containing a long program name failed to update the required buffer +size, leading to the allocation and overflow of a too-small buffer on +the heap. + +CVE-Id: CVE-2023-6246 +Public-Date: 2024-01-30 +Vulnerable-Commit: 52a5be0df411ef3ff45c10c7c308cb92993d15b1 (2.37) +Fix-Commit: 6bd0e4efcc78f3c0115e5ea9739a1642807450da (2.39) +Fix-Commit: 23514c72b780f3da097ecf33a793b7ba9c2070d2 (2.38-42) +Fix-Commit: 97a4292aa4a2642e251472b878d0ec4c46a0e59a (2.37-57) +Vulnerable-Commit: b0e7888d1fa2dbd2d9e1645ec8c796abf78880b9 (2.36-16) +Fix-Commit: d1a83b6767f68b3cb5b4b4ea2617254acd040c82 (2.36-126) |