A vulnerability in glibc that allows root access to the system
Qualys has discovered a dangerous vulnerability (CVE-2023-6246) in the standard C library Glibc, allowing the execution of arbitrary code with elevated privileges through manipulation of SUID application launches. Researchers were able to develop a working exploit that grants root privileges by manipulating command-line arguments when running the 'su' utility. The vulnerability is caused by a buffer overflow in the __vsyslog_internal() function, used during calls to the syslog() functions and […]
