CVE-2023-6780

CVE-2023-6780 · Glibc: integer overflow in __vsyslog_internal()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.

CVSS 5.3 · Medium · EPSS 2.7% · Fix available

Published

2024-01-31T14:08:02.610Z

Updated

2026-10-14T22:15:20.900Z

Stack: system

Check your server →