Skip to content
OpenAdvisories
Medium ALAS2-2022-1767 2 CVEs

Moderate: glibc security update (Amazon Linux 2)

Published Apr 4, 2022 · Updated Apr 6, 2022

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-23219: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clnt_create() in the sunrpc's clnt_gen.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) lead to arbitrary code execution. CVE-2022-23218: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunix_create() in the sunrpc's svc_unix.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its path argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) then it will lead to arbitrary code execution.

Fixed packages 201

ReleasePackageFixed in
Amazon Linux · 2 glibc 0:2.26-58.amzn2
Amazon Linux · 2 glibc-all-langpacks 0:2.26-58.amzn2
Amazon Linux · 2 glibc-benchtests 0:2.26-58.amzn2
Amazon Linux · 2 glibc-common 0:2.26-58.amzn2
Amazon Linux · 2 glibc-debuginfo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-debuginfo-common 0:2.26-58.amzn2
Amazon Linux · 2 glibc-devel 0:2.26-58.amzn2
Amazon Linux · 2 glibc-headers 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-aa 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-af 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ak 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-am 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-an 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-anp 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ar 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-as 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ast 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ayc 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-az 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-be 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bem 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ber 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bg 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bhb 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bho 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-br 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-brx 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-bs 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-byn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ca 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ce 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-chr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-cmn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-crh 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-cs 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-csb 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-cv 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-cy 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-da 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-de 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-doi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-dv 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-dz 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-el 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-en 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-eo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-es 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-et 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-eu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fa 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ff 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fil 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fur 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-fy 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ga 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-gd 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-gez 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-gl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-gu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-gv 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ha 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hak 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-he 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hne 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hsb 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ht 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-hy 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ia 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-id 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ig 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ik 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-is 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-it 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-iu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ja 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ka 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-kk 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-kl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-km 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-kn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ko 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-kok 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ks 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ku 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-kw 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ky 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lb 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lg 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-li 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lij 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ln 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lt 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lv 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-lzh 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mag 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mai 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mg 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mhr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mk 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ml 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mni 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ms 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-mt 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-my 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nan 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nb 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nds 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ne 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nhn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-niu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-nso 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-oc 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-om 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-or 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-os 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-pa 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-pap 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-pl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ps 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-pt 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-quz 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-raj 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ro 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ru 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-rw 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sa 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sat 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sc 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sd 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-se 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sgs 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-shs 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-si 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sid 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sk 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-so 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sq 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ss 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-st 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sv 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-sw 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-szl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ta 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tcy 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-te 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tg 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-th 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-the 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ti 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tig 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tk 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tl 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tn 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tr 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ts 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-tt 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ug 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-uk 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-unm 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ur 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-uz 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-ve 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-vi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-wa 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-wae 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-wal 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-wo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-xh 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-yi 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-yo 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-yue 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-zh 0:2.26-58.amzn2
Amazon Linux · 2 glibc-langpack-zu 0:2.26-58.amzn2
Amazon Linux · 2 glibc-locale-source 0:2.26-58.amzn2
Amazon Linux · 2 glibc-minimal-langpack 0:2.26-58.amzn2
Amazon Linux · 2 glibc-nss-devel 0:2.26-58.amzn2
Amazon Linux · 2 glibc-static 0:2.26-58.amzn2
Amazon Linux · 2 glibc-utils 0:2.26-58.amzn2
Amazon Linux · 2 libcrypt 0:2.26-58.amzn2
Amazon Linux · 2 libcrypt-nss 0:2.26-58.amzn2
Amazon Linux · 2 nscd 0:2.26-58.amzn2
Amazon Linux · 2 nss_db 0:2.26-58.amzn2
Amazon Linux · 2 nss_hesiod 0:2.26-58.amzn2
Amazon Linux · 2 nss_nis 0:2.26-58.amzn2

Vulnerabilities 2

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-23218.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-23219.html