Summary
It was discovered that klibc did not properly perform
some mathematical operations, leading to an integer overflow.
An attacker could possibly use this issue to cause a crash,
resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-31870)
It was discovered that klibc did not properly handled some
memory allocations on 64 bit systems. An attacker could
possibly use this issue to cause a crash, resulting in a
denial of service, or possibly execute arbitrary code.
(CVE-2021-31871)
It was discovered that klibc did not properly handled some file
sizes values on 32 bit systems. An attacker could possibly use
this issue to cause a crash, resulting in a denial of service,
or possibly execute arbitrary code. (CVE-2021-31872)
It was discovered that klibc did not properly handled some
memory allocations. An attacker could possibly use this issue
to cause a crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2021-31873)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | klibc | 2.0.4-9ubuntu2.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | klibc | 2.0.7-1ubuntu5.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | klibc | 2.0.3-0ubuntu1.14.04.3+esm2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | klibc | 2.0.4-8ubuntu1.16.04.4+esm1 |
Vulnerabilities 4
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflo…
-
Unscored —
An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer der…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit system…
-
Unscored —
An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and…