Servers and applications
CVE-2023-6780
An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.
- Severity
- Medium 5.3
- Published
- 31 Jan 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.39
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GNU C LibraryServers and applications · cpe:a:gnu:glibc |
|