remote system compromise in glibc

2003-05-2715:57:34

lists.opensuse.org

0.973 High

EPSS

Percentile

99.9%

JSON

Another integer overflow was found in glibc’ XDR code. This bug is equal to the one described in advisory SuSE-SA:2002:031. The overflow occurs in the function xdrmem_getbytes() and can be used by external attackers to execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
openSUSE7.1alphaglibc< 2.2-34glibc-2.2-34.alpha.rpm
openSUSE7.3sparcglibc< 2.2.4-46glibc-2.2.4-46.sparc.rpm
openSUSE7.2i386glibc< 2.2.2-68glibc-2.2.2-68.i386.rpm
openSUSE7.3ppcglibc< 2.2.4-69glibc-2.2.4-69.ppc.rpm
openSUSE7.3i386glibc< 2.2.4-78glibc-2.2.4-78.i386.rpm
openSUSE7.1i386glibc< 2.2-26glibc-2.2-26.i386.rpm
openSUSE8.1i686glibc< 2.2.5-177glibc-2.2.5-177.i686.rpm
openSUSE8.0i386glibc< 2.2.5-177glibc-2.2.5-177.i386.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	7.1	alpha	glibc	< 2.2-34	glibc-2.2-34.alpha.rpm
openSUSE	7.3	sparc	glibc	< 2.2.4-46	glibc-2.2.4-46.sparc.rpm
openSUSE	7.2	i386	glibc	< 2.2.2-68	glibc-2.2.2-68.i386.rpm
openSUSE	7.3	ppc	glibc	< 2.2.4-69	glibc-2.2.4-69.ppc.rpm
openSUSE	7.3	i386	glibc	< 2.2.4-78	glibc-2.2.4-78.i386.rpm
openSUSE	7.1	i386	glibc	< 2.2-26	glibc-2.2-26.i386.rpm
openSUSE	8.1	i686	glibc	< 2.2.5-177	glibc-2.2.5-177.i686.rpm
openSUSE	8.0	i386	glibc	< 2.2.5-177	glibc-2.2.5-177.i386.rpm

0.973 High

EPSS

Percentile

99.9%

JSON

Related for SUSE-SA:2003:027