Описание
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| devel | DNE | |
| esm-infra-legacy/trusty | not-affected | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| kinetic | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | not-affected | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 2.27-3ubuntu1.6 |
| devel | not-affected | 2.36-0ubuntu3 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 2.27-3ubuntu1.6 |
| esm-infra/focal | not-affected | 2.31-0ubuntu9.9 |
| esm-infra/xenial | not-affected | |
| focal | not-affected | 2.31-0ubuntu9.9 |
| jammy | not-affected | 2.35-0ubuntu3.1 |
| kinetic | not-affected | 2.36-0ubuntu3 |
| trusty | DNE |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
An issue was discovered in the GNU C Library (glibc) 2.36. When the sy ...
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
Уязвимость функции syslog() системной библиотеки glibc, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
7.5 High
CVSS3