● Ubuntu USN · June 2026

Ubuntu Linux Security Advisory: June 2026 Glibc Syslog Buffer Triage

Technical triage of Ubuntu's core system library updates resolving the Glibc __vsyslog_internal buffer overflow and systemd integration flaws.

19
Library Issues
1
Root LPE Flaw
7.8
CVSS Glibc
Critical
Base Image Priority

보안 릴리스 분석 및 위험성 평가

In June 2026, Canonical deployed emergency fixes for Glibc addressing CVE-2023-6246, a heap-based buffer overflow in __vsyslog_internal(). Attackers could trigger unauthenticated local privilege escalation across standard utilities like su and sudo.

핵심 취약점 트리아지 매트릭스

CVE 식별자 서브시스템 / 구성 요소 영향 CVSS 실제 악용 여부?
CVE-2023-6246GNU C Library (glibc)Heap Buffer Overflow7.8 HighYES (PoC Published)
CVE-2024-2961glibc iconvOut-of-Bounds Write8.1 HighNo
CVE-2024-33655systemd-resolvedDNS Cache Poisoning6.5 MediumNo
주목할 코드 분석

Deep Dive: Glibc __vsyslog_internal Heap Buffer Overflow Teardown →

See how calculating the printed string length without accounting for the syslog prefix allowed attackers to overflow heap memory in su/sudo.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →