Lucene search
GoogleOSV:CVE-2021-3420HistoryMar 05, 2021 - 9:15 p.m.
CVE-2021-3420
2021-03-0521:15:13
Google
osv.dev
9
newlib
integer overflow
memory allocation
buffer overflow
A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
References
bugzilla.redhat.com/show_bug.cgi?id=1934088
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/
Related
fedora
fedora
[SECURITY] Fedora 32 Update: arm-none-eabi-newlib-4.1.0-1.fc32
2021-03-12 00:07:45
[SECURITY] Fedora 33 Update: arm-none-eabi-newlib-4.1.0-1.fc33
2021-03-11 23:38:44
[SECURITY] Fedora 34 Update: arm-none-eabi-newlib-4.1.0-1.fc34
2021-03-19 20:25:42
alpinelinux
alpinelinux
CVE-2021-3420
2021-03-05 21:15:13
openvas
openvas
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-332fb9c796)
2021-03-12 00:00:00
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-267c08cc40)
2021-03-12 00:00:00
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-0fa2f42d3c)
2021-03-20 00:00:00
nessus
nessus
Fedora 32 : arm-none-eabi-newlib (2021-332fb9c796)
2021-03-12 00:00:00
Fedora 33 : arm-none-eabi-newlib (2021-267c08cc40)
2021-03-12 00:00:00
prion
prion
Integer overflow
2021-03-05 21:15:00
cvelist
cvelist
CVE-2021-3420
2021-03-05 19:19:28
redhatcve
redhatcve
CVE-2021-3420
2022-05-20 23:50:25
ubuntucve
ubuntucve
CVE-2021-3420
2021-03-05 00:00:00
nvd
nvd
CVE-2021-3420
2021-03-05 21:15:13
veracode
veracode
Arbitrary Code Execution
2021-05-06 07:37:08
debiancve
debiancve
CVE-2021-3420
2021-03-05 21:15:13
cve
cve
CVE-2021-3420
2021-03-05 21:15:13
ics
ics
Multiple RTOS (Update E)
2022-04-19 12:00:00