CVE-2016-2225

概要

参考情報

• repo.or.cz/uclibc-ng.git/commit/6932f2282ba0578d6ca2f21eead920d6b78bc93c · Issue Tracking
• openwall.com/lists/oss-security/2016/02/05/2 · Mailing List
• openwall.com/lists/oss-security/2016/02/05/3 · Mailing List
• securityfocus.com/bid/82903 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2016-2225 · Issue Tracking

uclibc-ng のその他の脆弱性

• CVE-2022-29503緊急 9.8A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread alloca…
• CVE-2022-30295中 6.5uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is relat…
• CVE-2021-27419緊急 9.8uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lea…
• CVE-2021-43523緊急 9.6In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, g…
• CVE-2016-2224高 7.5The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infini…