Uclibc-ng@* Security Vulnerabilities and Issues — Uclibc-ng@* CVE List

Lucene search

Uclibc-ng ProjectUclibc-ng*

3 matches found

CVE•added 2017/01/27 10:59 p.m.•52 views

CVE-2016-6264

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.

7.5CVSS7.1AI score0.01237EPSS

CVE•added 2017/03/24 3:59 p.m.•40 views

CVE-2016-2224

The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.

7.5CVSS7.2AI score0.00944EPSS

CVE•added 2017/03/24 3:59 p.m.•33 views

CVE-2016-2225

The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.

7.5CVSS7.1AI score0.00878EPSS