CVE-2021-31871

概要

参考情報

• openwall.com/lists/oss-security/2021/04/30/1 · Mailing List
• git.kernel.org/pub/scm/libs/klibc/klibc.git/commit · Patch
• kernel.org/pub/linux/libs/klibc/2.0 · Release Notes
• lists.debian.org/debian-lts-announce/2021/06/msg00025.html · Mailing List
• lists.zytor.com/archives/klibc/2021-April/004593.html · Mailing List

klibc のその他の脆弱性

• CVE-2021-31873緊急 9.8An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and a subsequent heap bu…
• CVE-2021-31872緊急 9.8An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buf…
• CVE-2021-31870緊急 9.8An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent he…
• CVE-2011-1930緊急 9.8In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote …