NEW LINUX GLIBC FLAW LETS ATTACKERS GET ROOT ON MAJOR DISTROS

Summary from the TLDR InfoSec newsletter

A new glibc vulnerability that could lead to local privilege escalation in Debian, Ubuntu, and Fedora systems has been discovered. The vulnerability is a heap-based buffer overflow in glibc’s __vsyslog__internal() function, which is used by syslog and vsyslog. Researchers also uncovered three other vulnerabilities in this function and another one in glibc’s qsort() function.