CVE-2016-2224

概要

参考情報

• repo.or.cz/uclibc-ng.git/commit/d9c3a16dcab57d6b56225b9a67e9119cc9e2e4ac · Issue Tracking
• openwall.com/lists/oss-security/2016/02/05/2 · Mailing List
• openwall.com/lists/oss-security/2016/02/05/3 · Mailing List
• securityfocus.com/bid/82903 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2016-2224 · Issue Tracking

uclibc-ng のその他の脆弱性

• CVE-2022-29503緊急 9.8A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread alloca…
• CVE-2022-30295中 6.5uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is relat…
• CVE-2021-27419緊急 9.8uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lea…
• CVE-2021-43523緊急 9.6In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, g…
• CVE-2016-2225高 7.5The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (inf…