An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.
2.30-0ubuntu22.30-0ubuntu32.31-0ubuntu52.31-0ubuntu62.31-0ubuntu72.31-0ubuntu92.31-0ubuntu9.12.31-0ubuntu9.122.31-0ubuntu9.22.31-0ubuntu9.3+2 more2.31-0ubuntu9.142.34-0ubuntu32.35-0ubuntu12.35-0ubuntu32.35-0ubuntu3.12.35-0ubuntu3.32.35-0ubuntu3.42.35-0ubuntu3.52.35-0ubuntu3.62.38-1ubuntu62.38-3ubuntu12.39-0ubuntu1Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:NI:LA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H