Lucene search

K
ubuntuUbuntuUSN-5699-1
HistoryOct 25, 2022 - 12:00 a.m.

GNU C Library vulnerabilities

2022-10-2500:00:00
ubuntu.com
29
gnu c library
ubuntu 16.04 esm
vulnerabilities
iconv
nscd daemon
denial of service

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

86.1%

Releases

  • Ubuntu 16.04 ESM

Packages

  • glibc - GNU C Library

Details

Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library
iconv feature incorrectly handled certain input sequences. An attacker
could possibly use this issue to cause the GNU C Library to hang or crash,
resulting in a denial of service. (CVE-2021-3326)

It was discovered that the GNU C Library nscd daemon incorrectly handled
certain netgroup lookups. An attacker could possibly use this issue to
cause the GNU C Library to crash, resulting in a denial of service.
(CVE-2021-35942)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchlibc6< 2.23-0ubuntu11.3+esm2UNKNOWN
Ubuntu16.04noarchglibc-doc< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchglibc-source< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-bin< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-bin-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-dev-bin< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc-dev-bin-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6-dbg< 2.23-0ubuntu11.3UNKNOWN
Ubuntu16.04noarchlibc6-dbgsym< 2.23-0ubuntu11.3UNKNOWN
Rows per page:
1-10 of 251

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

9

Confidence

High

EPSS

0.013

Percentile

86.1%