CVE-2022-39046
- Source
- https://cve.org/CVERecord?id=CVE-2022-39046
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39046.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-39046
- Downstream
- Related
- Published
- 2022-08-31T00:00:00Z
- Modified
- 2026-07-15T01:49:08.153809937Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
- Database specific
{ "cna_assigner": "mitre", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39046.json" }- References
-
- http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39046.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-39046
- https://security.gentoo.org/glsa/202310-03
- https://security.netapp.com/advisory/ntap-20221104-0002/
- https://sourceware.org/bugzilla/show_bug.cgi?id=29536
- http://seclists.org/fulldisclosure/2024/Feb/3
- http://www.openwall.com/lists/oss-security/2024/01/30/6
- http://www.openwall.com/lists/oss-security/2024/01/30/8
Affected packages
Git / github.com/bminor/glibc
Git / sourceware.org/git/glibc.git
Affected ranges
- Type
- GIT
- Repo
- https://sourceware.org/git/glibc.git
- Events
-
Introducedc804cd1c00adde061ca51711f63068c103e94eefLast affectedc804cd1c00adde061ca51711f63068c103e94eef
- Database specific
{ "cpe": "cpe:2.3:a:gnu:glibc:2.36:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "2.36" }, { "last_affected": "2.36" } ], "source": "CPE_STRING" }