CVE-2016-6264

概要

参考情報

• mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html · Release Notes
• mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html · Vendor Advisory
• openwall.com/lists/oss-security/2016/06/29/3 · Mailing List
• openwall.com/lists/oss-security/2016/07/21/2 · Mailing List
• openwall.com/lists/oss-security/2016/07/21/6 · Mailing List
• securityfocus.com/bid/91492 · Third Party Advisory

uclibc-ng のその他の脆弱性

• CVE-2022-29503緊急 9.8A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread alloca…
• CVE-2022-30295中 6.5uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is relat…
• CVE-2021-27419緊急 9.8uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lea…
• CVE-2021-43523緊急 9.6In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, g…
• CVE-2016-2225高 7.5The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (inf…