EUVD-2017-3717

Malware in sbrugna...

The vulnerability of the `clntudp_call` function in the `sunrpc/clnt_udp.c` component of the GNU C Library allows a attacker to compromise data integrity.

The vulnerability of the clntudpcall function in the sunrpc/clntudp.c component of the GNU C Library library relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

SUSE CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

The vulnerability of the clntudp_call function (sunrpc/clnt_udp.c) in the GNU C library (glibc or libc6) relates to writing beyond the buffer boundaries in memory. This allows an attacker to insert and execute arbitrary commands or cause a service denial.

The vulnerability of the clntudpcall function sunrpc/clntudp.c in the GNU C library glibc or libc6 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to inject and execute arbitrary commands, or cause service failures using special...

EulerOS 2.0 SP5 : glibc (EulerOS-SA-2019-1667)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - elf/dl-load.c in the GNU C Library aka glibc or libc6 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged setuid o...

DEBIAN-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

Design/Logic Flaw

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

UBUNTU-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2016:1733-1)

This update for glibc provides the following fixes : - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

lib32-glibc: denial of service

clntudpcall allocates a buffer, using alloca, to store the payload of an incoming socket error. If a malicious server floods the client with crafted ICMP and UDP packets, this can cause the client to allocate sufficiently many such temporary buffers to cause a stack frame overflow denial of...

GNU C Library clntudp_call Function Stack Buffer Overflow Vulnerability

glibc is the libc library, or c runtime library, released by GNU. A stack buffer overflow vulnerability exists in the GNU C Library glibc or libc6 sunrpc/clntudp.c/clntudpcall function. A remote attacker can cause a denial of service via a large number of ICMP and UDP messages...

Stack overflow

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

CVE-2016-4429

CVE-2016-4429: In glibc, a stack-based buffer overflow in sunrpc/clnt_udp.c:clntudp_call can be triggered by a flood of crafted ICMP/UDP packets, enabling a remote attacker to cause a denial of service (crash) and possibly other impact. Connected docs confirm the issue as a buffer overflow in the...

CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...

UBUNTU-CVE-2016-4429

Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets...