Lucene search
Veracode Vulnerability DatabaseVERACODE:30362HistoryMay 06, 2021 - 7:37 a.m.
Arbitrary Code Execution
2021-05-0607:37:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.006 Low
EPSS
Percentile
78.7%
newlib is vulnerable to arbitrary code execution. An integer overflow in mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc leads to a heap-based buffer overflow and allows an attacker to execute arbitrary code on the host OS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| newlib | eq | 3.0.0.20180831-r1 | |
| newlib | eq | 3.3.0-r2 | |
| newlib | eq | 3.0.0.20180831-r1 | |
| newlib | eq | 3.3.0-r2 |
References
bugzilla.redhat.com/show_bug.cgi?id=1934088
lists.fedoraproject.org/archives/list/[email protected]/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/
lists.fedoraproject.org/archives/list/[email protected]/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/
lists.fedoraproject.org/archives/list/[email protected]/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/
secdb.alpinelinux.org/edge/community.yaml
Related
fedora
fedora
[SECURITY] Fedora 32 Update: arm-none-eabi-newlib-4.1.0-1.fc32
2021-03-12 00:07:45
[SECURITY] Fedora 33 Update: arm-none-eabi-newlib-4.1.0-1.fc33
2021-03-11 23:38:44
[SECURITY] Fedora 34 Update: arm-none-eabi-newlib-4.1.0-1.fc34
2021-03-19 20:25:42
alpinelinux
alpinelinux
CVE-2021-3420
2021-03-05 21:15:13
osv
osv
CVE-2021-3420
2021-03-05 21:15:13
nessus
nessus
Fedora 33 : arm-none-eabi-newlib (2021-267c08cc40)
2021-03-12 00:00:00
Fedora 32 : arm-none-eabi-newlib (2021-332fb9c796)
2021-03-12 00:00:00
cvelist
cvelist
CVE-2021-3420
2021-03-05 19:19:28
prion
prion
Integer overflow
2021-03-05 21:15:00
openvas
openvas
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-267c08cc40)
2021-03-12 00:00:00
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-332fb9c796)
2021-03-12 00:00:00
Fedora: Security Advisory for arm-none-eabi-newlib (FEDORA-2021-0fa2f42d3c)
2021-03-20 00:00:00
redhatcve
redhatcve
CVE-2021-3420
2022-05-20 23:50:25
nvd
nvd
CVE-2021-3420
2021-03-05 21:15:13
ubuntucve
ubuntucve
CVE-2021-3420
2021-03-05 00:00:00
cve
cve
CVE-2021-3420
2021-03-05 21:15:13
debiancve
debiancve
CVE-2021-3420
2021-03-05 21:15:13
ics
ics
Multiple RTOS (Update E)
2022-04-19 12:00:00