Skip to content
OpenAdvisories

Package · Debian

uclibc

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • High 8.1
    CVE-2022-29503

    A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng …

    Anker uClibc-ng uClibC Eufy Homebase 2 Debian
  • Unscored —
    CVE-2022-30295 EPSS 11%

    uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poi…

    uclibc Debian
  • High 7.3
    CVE-2021-27419

    uClibc-ng Integer Overflow or Wraparound

    uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

    uClibc-ng uClibc-ng uclibc Debian
  • Critical 9.6
    CVE-2021-43523

    In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers…

    uclibc Debian
  • Unscored —
    CVE-2017-9729

    In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in m…

    uclibc Debian
  • Unscored —
    CVE-2017-9728

    In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a…

    uclibc Debian
  • Unscored —
    CVE-2016-2225

    The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a d…

    uclibc Debian
  • Unscored —
    CVE-2016-2224

    The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a deni…

    uclibc Debian
  • Unscored —
    CVE-2016-6264

    Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent att…

    uclibc Debian