Lucene search
GoogleOSV:CVE-2022-29503HistorySep 29, 2022 - 5:15 p.m.
CVE-2022-29503
2022-09-2917:15:28
Google
osv.dev
4
memory corruption
uclibc
linuxthreads
vulnerability
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.003
Percentile
68.8%
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
Related
cvelist
cvelist
CVE-2022-29503
2022-09-29 16:35:09
cbl_mariner
cbl_mariner
CVE-2022-29503 affecting package uclibc-ng 1.0.41-1
2023-07-28 23:16:55
CVE-2022-29503 affecting package uclibc-ng for versions less than 1.0.43-1
2023-08-03 02:51:21
cve
cve
CVE-2022-29503
2022-09-29 17:15:28
debiancve
debiancve
CVE-2022-29503
2022-09-29 17:15:28
prion
prion
Memory corruption
2022-09-29 17:15:00
talos
talos
nvd
nvd
CVE-2022-29503
2022-09-29 17:15:28
talosblog
talosblog
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.003
Percentile
68.8%
Related for OSV:CVE-2022-29503