1310 matches found
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
CVE-2022-28893 is a Linux kernel SUNRPC issue fixed in later kernels when the xs_xprt_free path runs before sockets reach the intended state, enabling kernel memory corruption via a use-after-free (UAF) condition in the inet_put_port flow. Public documentation confirms the root cause and that exp...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893: Use After Free
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
CVE-2022-28893
The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...
Denial Of Service (DoS)
Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7, hence, marked as Out-of-Support-Scope. For additional information, refer to the Issue Severity...
Medium: glibc
Issue Overview: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's svcunix.c module of the GNU C Library aka glibc through 2.34. This vulnerability copies its path argument onto the stack without validating its length, whic...
The vulnerability of the sunrpc module in the system library glibc, related to the execution of operations outside the buffer boundaries in memory, allows an attacker to execute arbitrary code.
The vulnerability of the sunrpc module in the system library glibc relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data to the application...
The vulnerability of the sunrpc module in the system library glibc allows a hacker to execute arbitrary code.
The vulnerability of the sunrpc module in the system library glibc is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data to the application...
ROS-20220323-02
A vulnerability in the glibc system library is related to a boundary error in the clntcreate function in module sunrpc module. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted input data to an application using a vulnerable version of the library...
Oracle Linux 8 : glibc (ELSA-2022-0896)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0896 advisory. - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak 2032280 - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc...
glibc security update
2.28-164.0.5.3 - Merge external errata patches. - Siddhesh Poyarekar - 2.28-164.3 - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak 2032280 - Siddhesh Poyarekar - 2.28-164.2 - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clntcreate for 'unix' and...
RHEL 8 : glibc (RHSA-2022:0896)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0896 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...
USN-5310-2 glibc vulnerabilities
USN-5310-1 fixed several vulnerabilities in GNU. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that the GNU C library getcwd function incorrectly handled buffers. An attacker could use this issue to cause the GNU C Library to cras...
USN-5310-1 glibc vulnerabilities
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS...
GSD-2022-1000509 SUNRPC: lock against ->sock changing during sysfs read
SUNRPC: lock against -sock changing during sysfs read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
GSD-2022-1000489 net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
net/sunrpc: fix reference count leaks in rpcsysfsxprtstatechange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
GSD-2022-1000414 net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
net/sunrpc: fix reference count leaks in rpcsysfsxprtstatechange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...
CLSA-2022-1645700784 Fix of CVE: CVE-2022-23219, CVE-2022-23218
CVE-2022-23218: stack buffer overflow in sunrpc module results in DoS - CVE-2022-23219: stack buffer overflow in sunrpc module results in DoS...
kernel security and bug fix update
3.10.0-1160.59.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...