Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-23219: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clnt_create() in the sunrpc's clnt_gen.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) lead to arbitrary code execution. CVE-2022-23218: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunix_create() in the sunrpc's svc_unix.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its path argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) then it will lead to arbitrary code execution.
Fixed packages 201
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | glibc | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-all-langpacks | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-benchtests | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-common | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-debuginfo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-debuginfo-common | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-devel | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-headers | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-aa | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-af | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ak | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-am | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-an | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-anp | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ar | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-as | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ast | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ayc | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-az | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-be | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bem | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ber | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bg | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bhb | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bho | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-br | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-brx | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-bs | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-byn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ca | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ce | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-chr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cmn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-crh | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cs | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-csb | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cv | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-cy | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-da | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-de | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-doi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-dv | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-dz | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-el | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-en | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-eo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-es | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-et | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-eu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fa | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ff | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fil | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fur | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-fy | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ga | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gd | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gez | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-gv | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ha | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hak | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-he | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hne | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hsb | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ht | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-hy | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ia | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-id | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ig | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ik | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-is | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-it | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-iu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ja | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ka | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kk | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-km | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ko | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kok | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ks | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ku | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-kw | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ky | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lb | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lg | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-li | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lij | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ln | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lt | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lv | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-lzh | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mag | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mai | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mg | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mhr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mk | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ml | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mni | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ms | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-mt | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-my | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nan | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nb | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nds | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ne | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nhn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-niu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-nso | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-oc | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-om | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-or | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-os | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pa | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pap | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ps | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-pt | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-quz | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-raj | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ro | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ru | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-rw | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sa | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sat | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sc | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sd | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-se | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sgs | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-shs | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-si | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sid | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sk | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-so | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sq | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ss | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-st | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sv | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-sw | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-szl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ta | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tcy | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-te | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tg | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-th | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-the | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ti | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tig | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tk | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tl | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tn | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tr | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ts | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-tt | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ug | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-uk | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-unm | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ur | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-uz | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-ve | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-vi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wa | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wae | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wal | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-wo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-xh | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yi | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yo | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-yue | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-zh | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-langpack-zu | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-locale-source | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-minimal-langpack | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-nss-devel | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-static | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | glibc-utils | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | libcrypt | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | libcrypt-nss | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | nscd | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | nss_db | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | nss_hesiod | 0:2.26-58.amzn2 |
| Amazon Linux · 2 | nss_nis | 0:2.26-58.amzn2 |
Vulnerabilities 2
-
Critical 9.8
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34…
-
Critical 9.8
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 co…