● Ubuntu USN · June 2026

Ubuntu Linux Security Advisory: June 2026 Glibc Syslog Buffer Triage

Technical triage of Ubuntu's core system library updates resolving the Glibc __vsyslog_internal buffer overflow and systemd integration flaws.

19
Library Issues
1
Root LPE Flaw
7.8
CVSS Glibc
Critical
Base Image Priority

Triage Exécutif et Verdict de Risque

In June 2026, Canonical deployed emergency fixes for Glibc addressing CVE-2023-6246, a heap-based buffer overflow in __vsyslog_internal(). Attackers could trigger unauthenticated local privilege escalation across standard utilities like su and sudo.

Matrice de Triage des Vulnérabilités

Identifiant CVE Sous-système / Composant Impact CVSS Exploitation Active ?
CVE-2023-6246GNU C Library (glibc)Heap Buffer Overflow7.8 HighYES (PoC Published)
CVE-2024-2961glibc iconvOut-of-Bounds Write8.1 HighNo
CVE-2024-33655systemd-resolvedDNS Cache Poisoning6.5 MediumNo
ANALYSE DE CODE DÉTAILLÉE

Deep Dive: Glibc __vsyslog_internal Heap Buffer Overflow Teardown →

See how calculating the printed string length without accounting for the syslog prefix allowed attackers to overflow heap memory in su/sudo.

← Parcourir l'Annuaire de Sécurité Tous les Bulletins de Sécurité →