Out-of-bounds

In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression...

DEBIAN-CVE-2017-9728

In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression...

CVE-2017-9728

In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression...

DEBIAN-CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

CVE-2017-9729

Summary: CVE-2017-9729 affects uClibc 0.9.33.2. The vulnerability is a stack exhaustion (uncontrolled recursion) in the function check_dst_limits_calc_pos_1 within misc/regex/regexec.c when processing a crafted regular expression. Affected component: uClibc C library; the issue stems from the reg...

CVE-2017-9728

In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression...

CVE-2017-9728

In uClibc 0.9.33.2, there is an out-of-bounds read in the getsubexp function in misc/regex/regexec.c when processing a crafted regular expression...

CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

CVE-2017-9728

CVE-2017-9728 affects uClibc 0.9.33.2, with an out-of-bounds read in the get_subexp function of misc/regex/regexec.c when processing a crafted regular expression. The connected sources consistently describe this exact issue; no remediation or patch details are provided in the supplied documents. ...

CVE-2017-9729

In uClibc 0.9.33.2, there is stack exhaustion uncontrolled recursion in the checkdstlimitscalcpos1 function in misc/regex/regexec.c when processing a crafted regular expression...

Design/Logic Flaw

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

Design/Logic Flaw

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

DEBIAN-CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...

CVE-2016-2225

CVE-2016-2225 affects uClibc-ng (libc/inet/resolv.c) prior to 1.0.12, where the __read_etc_hosts_r function can be triggered by a crafted DNS packet from a remote server, causing a denial of service (infinite loop). Public data identifies this as a network-affecting vulnerability with CVSS v3.0 b...

CVE-2016-2224

CVE-2016-2224 affects the C library uClibc-ng: the __decode_dotted function in libc/inet/resolv.c is vulnerable in builds before 1.0.12, allowing remote DNS servers to trigger a denial of service (infinite loop) by sending specially crafted DNS replies with compressed items. Impact is a network-e...

CVE-2016-2225

The readetchostsr function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via a crafted packet...

CVE-2016-2224

The decodedotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service infinite loop via vectors involving compressed items in a reply...