{"id":"CVE-2023-6779","aliases":["AZL-34736","BELL-CVE-2023-6779","DEBIAN-CVE-2023-6779","DSA-5611-1","EUVD-2023-58991","GHSA-p5vr-h433-qhqr","MGASA-2024-0026","UBUNTU-CVE-2023-6779"],"status":"published","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.03153,"percentile":0.88119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2024-01-30T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"glibc","fixed_in":["2.38-6"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"glibc","fixed_in":["2.37.0-r10"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"glibc","fixed_in":["2.37.0-r10"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"glibc","fixed_in":["2.37.0-r10"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"glibc","fixed_in":["2.37.0-r10"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.36-9+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.37-15"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.37-15"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"glibc","fixed_in":["2.39-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.37.0-r9"},{"fixed":"2.37.0-r10"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.37.0-r9"},{"fixed":"2.37.0-r10"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.37.0-r9"},{"fixed":"2.37.0-r10"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.37.0-r9"},{"fixed":"2.37.0-r10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36-9+deb12u4"}]}],"versions":["2.36-9","2.36-9+deb12u1","2.36-9+deb12u2","2.36-9+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-15"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-15"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36-9+deb12u4"}]}],"versions":["2.36-9","2.36-9+deb12u1","2.36-9+deb12u2","2.36-9+deb12u3"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36-52.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-0ubuntu1"}]}],"versions":["2.38-1ubuntu6","2.38-3ubuntu1"]}],"products":[{"vendor":"fedora","product":"fedora"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"glibc"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6779","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254395","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred","Mailing List","web"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred","Exploit","Mailing List","web"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240223-0006/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6779","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ"},{"url":"https://security.netapp.com/advisory/ntap-20240223-0006"},{"url":"https://github.com/advisories/GHSA-p5vr-h433-qhqr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-6779","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-9","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://packages.fedoraproject.org/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6779.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-6779","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0026.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32796","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/DSA-5611-1","tags":["web"]},{"url":"https://bodhi.fedoraproject.org/updates/FEDORA-2024-aec80d6e8a","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-6779","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6620-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6779","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-6779","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:07:41.967Z","modified":"2026-10-14T22:15:19.456Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58991","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:07:41Z","modified":"2026-10-14T22:15:19Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:11.707191Z"}],"ghsa":[{"id":"GHSA-p5vr-h433-qhqr","title":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the...","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T15:30:20Z","modified":"2026-05-12T12:32:37Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:08:02.626987Z"}],"nvd":[{"id":"CVE-2023-6779","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:15:48.7Z","modified":"2026-06-17T06:51:24.53Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"AZL-34736","title":"CVE-2023-6779 affecting package glibc for versions less than 2.38-6","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:15:48Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-6779","status":"published","published":"2024-02-01T05:57:36.114669Z","modified":"2026-01-26T09:34:42.733801Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2023-6779","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:07:41.967Z","modified":"2026-10-28T02:31:14.276639279Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-6779","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T14:15:48.7Z","modified":"2026-10-26T18:02:22.015077336Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"UBUNTU-CVE-2023-6779","description":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","status":"published","published":"2024-01-31T00:00:00Z","modified":"2026-04-22T14:35:29.582691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"DSA-5611-1","title":"glibc - security update","status":"published","published":"2024-01-30T00:00:00Z","modified":"2026-03-09T02:10:10.672102Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0026","title":"Updated glibc packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nA heap-based buffer overflow was found in the __vsyslog_internal\nfunction of the glibc library. This function is called by the syslog and\nvsyslog functions. This issue occurs when the openlog function was not\ncalled, or called with the ident argument set to NULL, and the program\nname (the basename of argv[0]) is bigger than 1024 bytes, resulting in\nan application crash or local privilege escalation. (CVE-2023-6246)\nAn off-by-one heap-based buffer overflow was found in the\n__vsyslog_internal function of the glibc library. This function is\ncalled by the syslog and vsyslog functions. This issue occurs when these\nfunctions are called with a message bigger than INT_MAX bytes, leading\nto an incorrect calculation of the buffer size to store the message,\nresulting in an application crash. (CVE-2023-6779)\nAn integer overflow was found in the __vsyslog_internal function of the\nglibc library. This function is called by the syslog and vsyslog\nfunctions. This issue occurs when these functions are called with a very\nlong message, leading to an incorrect calculation of the buffer size to\nstore the message, resulting in undefined behavior. (CVE-2023-6780)\n","status":"published","published":"2024-02-04T02:49:27Z","modified":"2026-04-16T04:44:15.157462009Z","updated_at":"2026-11-02T15:49:42.684501Z"}]}}