Vulnerabilities > CVE-2021-27419 - Unspecified vulnerability in Uclibc-Ng Project Uclibc-Ng

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

uclibc-ng-project

critical

NVD

Published: 2022-05-03

Updated: 2024-11-21

Summary

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Vulnerable Configurations

Part	Description	Count
Application	Uclibc-Ng_Project Uclibc NG Project Uclibc NG 1.0.0 Uclibc NG Project Uclibc NG 1.0.1 Uclibc NG Project Uclibc NG 1.0.2 Uclibc NG Project Uclibc NG 1.0.3 Uclibc NG Project Uclibc NG 1.0.4 Uclibc NG Project Uclibc NG 1.0.5 Uclibc NG Project Uclibc NG 1.0.6 Uclibc NG Project Uclibc NG 1.0.7 Uclibc NG Project Uclibc NG 1.0.8 Uclibc NG Project Uclibc NG 1.0.9 Uclibc NG Project Uclibc NG 1.0.10 Uclibc NG Project Uclibc NG 1.0.11 Uclibc NG Project Uclibc NG 1.0.15 Uclibc NG Project Uclibc NG 1.0.16 Uclibc NG Project Uclibc NG 1.0.17 Uclibc NG Project Uclibc NG 1.0.18 Uclibc NG Project Uclibc NG 1.0.19 Uclibc NG Project Uclibc NG 1.0.20 Uclibc NG Project Uclibc NG 1.0.21 Uclibc NG Project Uclibc NG 1.0.22 Uclibc NG Project Uclibc NG 1.0.23 Uclibc NG Project Uclibc NG 1.0.24 Uclibc NG Project Uclibc NG 1.0.25 Uclibc NG Project Uclibc NG 1.0.26 Uclibc NG Project Uclibc NG 1.0.27 Uclibc NG Project Uclibc NG 1.0.28 Uclibc NG Project Uclibc NG 1.0.29 Uclibc NG Project Uclibc NG 1.0.30 Uclibc NG Project Uclibc NG 1.0.31 Uclibc NG Project Uclibc NG 1.0.32 Uclibc NG Project Uclibc NG 1.0.33 Uclibc NG Project Uclibc NG 1.0.34 Uclibc NG Project Uclibc NG 1.0.35 Uclibc NG Project Uclibc NG 1.0.36	34

Summary

Vulnerable Configurations

References