TI-2022-11964 CVE-2022-29503 · GHSA-8544-pv22-r7m4
Memory corruption in Anker Eufy Homebase 2
Priority HIGH 76
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40.
Vulnerabilities
6 records
TI-2022-12530 CVE-2022-30295 · GHSA-gv7v-mf7r-p93f
uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs…
Priority MEDIUM 42
uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning.
TI-2021-19416 CVE-2021-43523 · GHSA-65xv-vmv6-8r3f
In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain…
Priority HIGH 76
In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo can lead to output of wrong hostnames…
TI-2017-07117 CVE-2017-9729 · GHSA-c2v6-69qq-j8h4
In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the…
Priority LOW 35
In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.
TI-2017-07116 CVE-2017-9728 · GHSA-7hhr-482g-qfrq
In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in…
Priority MEDIUM 45
In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.
TI-2016-05366 CVE-2016-6264 · GHSA-5f7g-9m8m-qhpv
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before…
Priority LOW 38
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.