CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2021-31870 – Ubuntu Security Notice USN-5379-1
https://notcve.org/view.php?id=CVE-2021-31870
30 Apr 2021 — An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow. Se detectó un problema en klibc versiones anteriores a 2.0.9. Una multiplicación en la función calloc() puede resultar en un desbordamiento de enteros y un posterior desbordamiento del búfer de la pila. It was discovered that klibc did not properly perform some mathematical operations, leading to an integer overflow. • http://www.openwall.com/lists/oss-security/2021/04/30/1 • CWE-190: Integer Overflow or Wraparound •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2021-31872 – Ubuntu Security Notice USN-5379-1
https://notcve.org/view.php?id=CVE-2021-31872
30 Apr 2021 — An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact. Se detectó un problema en klibc versiones anteriores a 2.0.9. Múltiples desbordamientos de enteros posibles en el comando cpio en sistemas de 32 bits pueden resultar en un desbordamiento del búfer u otro impacto en la seguridad. It was discovered that klibc did not properly perform some mathematical operations, leading to an i... • http://www.openwall.com/lists/oss-security/2021/04/30/1 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2021-31871 – Ubuntu Security Notice USN-5379-1
https://notcve.org/view.php?id=CVE-2021-31871
30 Apr 2021 — An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems. Se detectó un problema en klibc versiones anteriores a 2.0.9. Un desbordamiento de enteros en el comando cpio puede resultar en una desreferencia del puntero NULL en sistemas de 64 bits. It was discovered that klibc did not properly perform some mathematical operations, leading to an integer overflow. • http://www.openwall.com/lists/oss-security/2021/04/30/1 • CWE-190: Integer Overflow or Wraparound •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2021-31873 – Ubuntu Security Notice USN-5379-1
https://notcve.org/view.php?id=CVE-2021-31873
30 Apr 2021 — An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and a subsequent heap buffer overflow. Se detectó un problema en klibc versiones anteriores a 2.0.9. Las adiciones en la función malloc() pueden resultar en un desbordamiento de enteros y un posterior desbordamiento del búfer de la pila. It was discovered that klibc did not properly perform some mathematical operations, leading to an integer overflow. • http://www.openwall.com/lists/oss-security/2021/04/30/1 • CWE-190: Integer Overflow or Wraparound •
CVSS: 10.0EPSS: 29%CPEs: 4EXPL: 1CVE-2011-1930 – klibc 1.5.2 - DHCP Options Processing Remote Shell Command Execution
https://notcve.org/view.php?id=CVE-2011-1930
27 Sep 2013 — In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options. En klibc versiones 1.5.20 y 1.5.21, las opciones de DHCP escritas por ipconfig en el archivo /tmp/net-$DEVICE.conf no se escapan apropiadamente. Esto puede permitir a un atacante remoto enviar una respuesta DHCP especialmente ... • https://www.exploit-db.com/exploits/35785 •