Red Hat Security AdvisoryRHSA-2022:0896
glibc security update
Released 2022-03-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) glibc-benchtests-2.28-164.el8_5.3, glibc-nss-devel-2.28-164.el8_5.3, glibc-static-2.28-164.el8_5.3 +1
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-164.el8_5.3, glibc-utils-2.28-164.el8_5.3
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-164.el8_5.3, glibc-all-langpacks-2.28-164.el8_5.3, glibc-common-2.28-164.el8_5.3 +47
Fixes 3 records
Priority HIGH 82
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer o…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05034 · Published 2022-01-14 · Partial fix CWE-120
Priority HIGH 82
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer ov…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0565 · Published 2022-01-14 · Partial fix CWE-120
Priority LOW 38
A flaw was found in glibc.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00809 · Published 2022-08-24 · Partial fix CWE-193
