CVE-2021-31871

An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems...

CVE-2021-31871

An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems...

CVE-2021-31871

An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems...

CVE-2021-31871

CVE-2021-31871 affects klibc prior to 2.0.9. The issue is an integer overflow in the cpio command that may cause a NULL pointer dereference on 64-bit systems, potentially enabling a crash or arbitrary code execution depending on context. Connected advisories confirm this vulnerability across mult...

klibc 输入验证错误漏洞

klibc is an application program. Provides the ability to work with as many early starts from kernel space as possible. klibc versions prior to 2.0.9 are vulnerable to an input validation error that stems from an integer overflow in the cpio command that could lead to dereferencing NULL pointers o...

klibc 输入验证错误漏洞

klibc is an application program. Provides the ability to work from kernel space as early as possible. klibc versions prior to 2.0.9 are vulnerable to an input validation error, which stems from a multiplication in the calloc function that could lead to an integer overflow and subsequent heap buff...

CVE-2021-31873

An issue was discovered in klibc before 2.0.9. Additions in the malloc function may result in an integer overflow and a subsequent heap buffer overflow...

CVE-2021-31873

CVE-2021-31873 affects klibc prior to 2.0.9. Additions in malloc() may cause an integer overflow and a subsequent heap buffer overflow, per multiple sources. Reported impacts include crashes and potential for denial of service, with some advisories noting possible arbitrary code execution in affe...

klibc 输入验证错误漏洞

klibc is an application program. Provides the ability to work from kernel space as early as possible. klibc versions prior to 2.0.9 are vulnerable to an input validation error, which stems from multiple possible integer overflows in the cpio command on 32-bit systems that could lead to buffer...

CVE-2021-31873

An issue was discovered in klibc before 2.0.9. Additions in the malloc function may result in an integer overflow and a subsequent heap buffer overflow...

klibc 输入验证错误漏洞

klibc is an application program. Provides the ability to work with as many early starts from kernel space as possible. klibc versions prior to 2.0.9 are vulnerable to an input validation error that stems from an addition in the malloc function that could lead to an integer overflow and subsequent...

CVE-2021-31873

An issue was discovered in klibc before 2.0.9. Additions in the malloc function may result in an integer overflow and a subsequent heap buffer overflow...

PT-2021-4562 · Klibc +4 · Klibc +4

Name of the Vulnerable Software and Affected Versions: klibc versions prior to 2.0.9 Description: The issue is related to the malloc function in the klibc library, which may result in an integer overflow and a subsequent heap buffer overflow. This could allow a remote attacker to access...

CVE-2011-1930

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...

CVE-2011-1930

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...

DEBIAN-CVE-2011-1930

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...

CVE-2011-1930

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...

Code injection

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...

CVE-2011-1930

CVE-2011-1930 affects klibc 1.5.20 and 1.5.21; DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped, enabling a remote attacker to craft a DHCP reply that could execute arbitrary code with the privileges of the process sourcing DHCP options. Multiple advisories (RH, ...

CVE-2011-1930

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...