Lucene search

K
osvGoogleOSV:USN-5310-2
HistoryMar 07, 2022 - 2:01 p.m.

glibc vulnerabilities

2022-03-0714:01:17
Google
osv.dev
15
gnu c library
buffer handling
denial of service
arbitrary code
ubuntu 16.04 esm

AI Score

8

Confidence

Low

EPSS

0.016

Percentile

87.5%

USN-5310-1 fixed several vulnerabilities in GNU. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that the GNU C library getcwd function incorrectly
handled buffers. An attacker could use this issue to cause the GNU C
Library to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-3999)

It was discovered that the GNU C Library sunrpc module incorrectly handled
buffer lengths. An attacker could possibly use this issue to cause the GNU
C Library to crash, resulting in a denial of service. (CVE-2022-23218,
CVE-2022-23219)