The vulnerability of the clntudp_call function (sunrpc/clnt_udp.c) in the GNU C library (glibc or libc6) relates to writing beyond the buffer boundaries in memory. This allows an attacker to insert and execute arbitrary commands or cause a service denial.

🗓️ 26 Jul 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

glibc clntudp_call vulnerability allows buffer overflow enabling remote execution via UDP packets.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Glibc affect IBM Security Network Controller (CVE-2016-3706, CVE-2016-4429)	16 Jun 201821:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple glibc vulnerabilities (CVE-2016-1234, CVE-2016-3706, CVE-2016-4429)	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Security Network Active Bypass (CVE-2016-3706, CVE-2016-4429)	16 Jun 201821:49	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package glibc version 6:2.23-alt3	9 Jun 201600:00	–	altlinux
android	CVE-2016-4429	1 Dec 201700:00	–	android
ArchLinux	glibc: denial of service	19 Jun 201600:00	–	archlinux
ArchLinux	lib32-glibc: denial of service	19 Jun 201600:00	–	archlinux
Broadcom	BSA-2019-110	1 Apr 201900:00	–	broadcom
Cloud Foundry	USN-3759-1: libtirpc vulnerabilities \| Cloud Foundry	27 Sep 201800:00	–	cloudfoundry
Cloud Foundry	USN-3239-2: GNU C Library Regression \| Cloud Foundry	31 Mar 201700:00	–	cloudfoundry

Vulners

Node

OR

gnu glibcRange<2.24

ibm flex_system_managerMatch1.3.4.0

ibm flex_system_managerMatch1.3.3.0

ibm flex_system_managerMatch1.3.2.1

ibm flex_system_managerMatch1.3.2.0

novell opensuseMatch13.2

novell opensuse_leapMatch42.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-4429
vuldb	www.vuldb.com/sv/
lists	www.lists.opensuse.org/opensuse-updates/2016-06/msg00030.html
lists	www.lists.opensuse.org/opensuse-updates/2016-07/msg00039.html
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/102073
lists	www.lists.debian.org/debian-lts-announce/2020/06/msg00027.html
source	www.source.android.com/security/bulletin/2017-12-01
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi

21 Nov 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 25.4

CVSS 35.9

EPSS0.03922

buffer overflow clntudp_call sunrpc remote execution network packets