PT-2021-4576

🗓️ 28 Apr 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

Integer overflow in klibc calloc() function may lead to heap buffer overflow.

Reporter	Title	Published	Views	Family All 88
attackerkb	CVE-2021-31873	30 Apr 202106:15	–	attackerkb
attackerkb	CVE-2021-31872	30 Apr 202106:15	–	attackerkb
attackerkb	CVE-2021-31871	30 Apr 202106:15	–	attackerkb
attackerkb	CVE-2021-31870	30 Apr 202106:15	–	attackerkb
AlpineLinux	CVE-2021-31870	30 Apr 202105:19	–	alpinelinux
AlpineLinux	CVE-2021-31871	30 Apr 202105:18	–	alpinelinux
AlpineLinux	CVE-2021-31872	30 Apr 202105:19	–	alpinelinux
AlpineLinux	CVE-2021-31873	30 Apr 202100:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in klibc	5 Oct 202611:39	–	astralinux
AstraLinux	Astra Linux – Vulnerability in klibc	14 Sep 202612:41	–	astralinux

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-5379-1
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/682249
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
ubuntu	www.ubuntu.com/security/CVE-2021-31872
openwall	www.openwall.com/lists/oss-security/2021/04/30/1
ubuntu	www.ubuntu.com/security/CVE-2021-31871
lists	www.lists.debian.org/debian-lts-announce/2021/06/msg00025.html
kernel	www.kernel.org/pub/linux/libs/klibc/2.0
osv	www.osv.dev/vulnerability/DLA-2695-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-31870

26 Apr 2022 00:00Current

CVSS 3.19.8

CVSS 27.5

EPSS0.02165

klibc calloc()integer overflow heap buffer overflow denial of service confidential data access