GNU C Library Vulnerability Leads to Full Root Access
January 31, 2024 at 12:48PM A vulnerability in Linux’s glibc allows attackers to gain full root access, as reported by Qualys. Tracked as CVE-2023-6246, the heap-based buffer overflow in glibc’s __vsyslog_internal() function can be exploited by providing a long argv[0] or openlog() ident argument. While remote triggering is unlikely, it poses a significant risk due … Read more