● Ubuntu USN · June 2026

Ubuntu Linux Security Advisory: June 2026 Glibc Syslog Buffer Triage

Technical triage of Ubuntu's core system library updates resolving the Glibc __vsyslog_internal buffer overflow and systemd integration flaws.

19
Library Issues
1
Root LPE Flaw
7.8
CVSS Glibc
Critical
Base Image Priority

Executive Triage und Risikobewertung

In June 2026, Canonical deployed emergency fixes for Glibc addressing CVE-2023-6246, a heap-based buffer overflow in __vsyslog_internal(). Attackers could trigger unauthenticated local privilege escalation across standard utilities like su and sudo.

Kuratierte Schwachstellen-Triage-Matrix

CVE-Kennung Subsystem / Komponente Auswirkung CVSS Aktive Ausnutzung?
CVE-2023-6246GNU C Library (glibc)Heap Buffer Overflow7.8 HighYES (PoC Published)
CVE-2024-2961glibc iconvOut-of-Bounds Write8.1 HighNo
CVE-2024-33655systemd-resolvedDNS Cache Poisoning6.5 MediumNo
HERVORGEHOBENE CODE-ANALYSE

Deep Dive: Glibc __vsyslog_internal Heap Buffer Overflow Teardown →

See how calculating the printed string length without accounting for the syslog prefix allowed attackers to overflow heap memory in su/sudo.

← Sicherheitsverzeichnis durchsuchen Alle Sicherheitsupdates →