Vulnerability in glibc allowing root access on the system

[or1k]

Vulnerability in glibc allowing root access on the system

A vulnerability (CVE-2023-6246) in the standard C library Glibc allows to get its code executed with elevated privileges through manipulation of running SUID applications. Researchers were able to develop a working exploit that allows to gain root privileges by manipulating command line arguments when running the su utility.

The vulnerability has been confirmed in Debian 12/13, Ubuntu 23.04/23.10 and Fedora 37-39. The vulnerability can only be exploited locally.

A fix for the vulnerability is included in the Glibc code base and will be included in tomorrow's Glibc 2.39 update, along with fixes for two other vulnerabilities (CVE-2023-6779, CVE-2023-6780).

✅ You can test your system's exposure to the vulnerability with the following command:

$ (exec -a "printf '%0128000x' 1" /usr/bin/su < /dev/null)