Vulnerabilities > CVE-2021-31870 - Integer Overflow or Wraparound vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

klibc-project

debian

CWE-190

critical

NVD

Published: 2021-04-30

Updated: 2024-11-21

Summary

An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Klibc_Project Klibc Project Klibc 0.1 Klibc Project Klibc 0.2 Klibc Project Klibc 0.3 Klibc Project Klibc 0.4 Klibc Project Klibc 0.5 Klibc Project Klibc 0.6 Klibc Project Klibc 0.7 Klibc Project Klibc 0.8 Klibc Project Klibc 0.9 Klibc Project Klibc 0.10 Klibc Project Klibc 0.11 Klibc Project Klibc 0.12 Klibc Project Klibc 0.13 Klibc Project Klibc 0.14 Klibc Project Klibc 0.15 Klibc Project Klibc 0.16 Klibc Project Klibc 0.17 Klibc Project Klibc 0.18 Klibc Project Klibc 0.19 Klibc Project Klibc 0.20 Klibc Project Klibc 0.21 Klibc Project Klibc 0.22 Klibc Project Klibc 0.23 Klibc Project Klibc 0.24 Klibc Project Klibc 0.25 Klibc Project Klibc 0.26 Klibc Project Klibc 0.27 Klibc Project Klibc 0.28 Klibc Project Klibc 0.29 Klibc Project Klibc 0.30 Klibc Project Klibc 0.31 Klibc Project Klibc 0.32 Klibc Project Klibc 0.33 Klibc Project Klibc 0.34 Klibc Project Klibc 0.35 Klibc Project Klibc 0.36 Klibc Project Klibc 0.37 Klibc Project Klibc 0.38 Klibc Project Klibc 0.39 Klibc Project Klibc 0.40 Klibc Project Klibc 0.41 Klibc Project Klibc 0.42 Klibc Project Klibc 0.43 Klibc Project Klibc 0.44 Klibc Project Klibc 0.45 Klibc Project Klibc 0.46 Klibc Project Klibc 0.47 Klibc Project Klibc 0.48 Klibc Project Klibc 0.49 Klibc Project Klibc 0.50 Klibc Project Klibc 0.51 Klibc Project Klibc 0.52 Klibc Project Klibc 0.53 Klibc Project Klibc 0.54 Klibc Project Klibc 0.55 Klibc Project Klibc 0.56 Klibc Project Klibc 0.57 Klibc Project Klibc 0.58 Klibc Project Klibc 0.59 Klibc Project Klibc 0.60 Klibc Project Klibc 0.62 Klibc Project Klibc 0.63 Klibc Project Klibc 0.64 Klibc Project Klibc 0.65 Klibc Project Klibc 0.66 Klibc Project Klibc 0.67 Klibc Project Klibc 0.68 Klibc Project Klibc 0.69 Klibc Project Klibc 0.70 Klibc Project Klibc 0.71 Klibc Project Klibc 0.72 Klibc Project Klibc 0.73 Klibc Project Klibc 0.74 Klibc Project Klibc 0.75 Klibc Project Klibc 0.76 Klibc Project Klibc 0.77 Klibc Project Klibc 0.78 Klibc Project Klibc 0.79 Klibc Project Klibc 0.80 Klibc Project Klibc 0.81 Klibc Project Klibc 0.82 Klibc Project Klibc 0.83 Klibc Project Klibc 0.84 Klibc Project Klibc 0.85 Klibc Project Klibc 0.86 Klibc Project Klibc 0.87 Klibc Project Klibc 0.88 Klibc Project Klibc 0.89 Klibc Project Klibc 0.90 Klibc Project Klibc 0.91 Klibc Project Klibc 0.92 Klibc Project Klibc 0.93 Klibc Project Klibc 0.94 Klibc Project Klibc 0.95 Klibc Project Klibc 0.96 Klibc Project Klibc 0.97 Klibc Project Klibc 0.98 Klibc Project Klibc 0.99 Klibc Project Klibc 0.100 Klibc Project Klibc 0.101 Klibc Project Klibc 0.102 Klibc Project Klibc 0.103 Klibc Project Klibc 0.104 Klibc Project Klibc 0.105 Klibc Project Klibc 0.106 Klibc Project Klibc 0.107 Klibc Project Klibc 0.108 Klibc Project Klibc 0.109 Klibc Project Klibc 0.110 Klibc Project Klibc 0.111 Klibc Project Klibc 0.112 Klibc Project Klibc 0.113 Klibc Project Klibc 0.114 Klibc Project Klibc 0.115 Klibc Project Klibc 0.116 Klibc Project Klibc 0.117 Klibc Project Klibc 0.118 Klibc Project Klibc 0.119 Klibc Project Klibc 0.120 Klibc Project Klibc 0.121 Klibc Project Klibc 0.122 Klibc Project Klibc 0.123 Klibc Project Klibc 0.124 Klibc Project Klibc 0.125 Klibc Project Klibc 0.126 Klibc Project Klibc 0.127 Klibc Project Klibc 0.128 Klibc Project Klibc 0.129 Klibc Project Klibc 0.130 Klibc Project Klibc 0.131 Klibc Project Klibc 0.132 Klibc Project Klibc 0.133 Klibc Project Klibc 0.134 Klibc Project Klibc 0.135 Klibc Project Klibc 0.136 Klibc Project Klibc 0.137 Klibc Project Klibc 0.138 Klibc Project Klibc 0.139 Klibc Project Klibc 0.140 Klibc Project Klibc 0.141 Klibc Project Klibc 0.142 Klibc Project Klibc 0.143 Klibc Project Klibc 0.144 Klibc Project Klibc 0.145 Klibc Project Klibc 0.146 Klibc Project Klibc 0.147 Klibc Project Klibc 0.148 Klibc Project Klibc 0.149 Klibc Project Klibc 0.150 Klibc Project Klibc 0.151 Klibc Project Klibc 0.152 Klibc Project Klibc 0.153 Klibc Project Klibc 0.154 Klibc Project Klibc 0.155 Klibc Project Klibc 0.156 Klibc Project Klibc 0.157 Klibc Project Klibc 0.158 Klibc Project Klibc 0.159 Klibc Project Klibc 0.160 Klibc Project Klibc 0.161 Klibc Project Klibc 0.162 Klibc Project Klibc 0.163 Klibc Project Klibc 0.164 Klibc Project Klibc 0.165 Klibc Project Klibc 0.166 Klibc Project Klibc 0.167 Klibc Project Klibc 0.168 Klibc Project Klibc 0.169 Klibc Project Klibc 0.170 Klibc Project Klibc 0.171 Klibc Project Klibc 0.172 Klibc Project Klibc 0.173 Klibc Project Klibc 0.174 Klibc Project Klibc 0.175 Klibc Project Klibc 0.176 Klibc Project Klibc 0.177 Klibc Project Klibc 0.178 Klibc Project Klibc 0.179 Klibc Project Klibc 0.180 Klibc Project Klibc 0.181 Klibc Project Klibc 0.182 Klibc Project Klibc 0.183 Klibc Project Klibc 0.184 Klibc Project Klibc 0.185 Klibc Project Klibc 0.186 Klibc Project Klibc 0.187 Klibc Project Klibc 0.188 Klibc Project Klibc 0.189 Klibc Project Klibc 0.190 Klibc Project Klibc 0.191 Klibc Project Klibc 0.192 Klibc Project Klibc 0.193 Klibc Project Klibc 0.194 Klibc Project Klibc 0.195 Klibc Project Klibc 0.196 Klibc Project Klibc 0.197 Klibc Project Klibc 0.198 Klibc Project Klibc 0.199 Klibc Project Klibc 0.200 Klibc Project Klibc 0.201 Klibc Project Klibc 0.202 Klibc Project Klibc 0.203 Klibc Project Klibc 0.204 Klibc Project Klibc 0.205 Klibc Project Klibc 0.206 Klibc Project Klibc 0.207 Klibc Project Klibc 0.208 Klibc Project Klibc 0.209 Klibc Project Klibc 0.210 Klibc Project Klibc 0.211 Klibc Project Klibc 0.212 Klibc Project Klibc 0.213 Klibc Project Klibc 0.214 Klibc Project Klibc 0.215 Klibc Project Klibc 0.216 Klibc Project Klibc 0.217 Klibc Project Klibc 1.0 Klibc Project Klibc 1.0.1 Klibc Project Klibc 1.0.2 Klibc Project Klibc 1.0.3 Klibc Project Klibc 1.0.4 Klibc Project Klibc 1.0.5 Klibc Project Klibc 1.0.6 Klibc Project Klibc 1.0.7 Klibc Project Klibc 1.0.8 Klibc Project Klibc 1.0.9 Klibc Project Klibc 1.0.10 Klibc Project Klibc 1.0.11 Klibc Project Klibc 1.0.12 Klibc Project Klibc 1.0.13 Klibc Project Klibc 1.0.14 Klibc Project Klibc 1.1 Klibc Project Klibc 1.1.1 Klibc Project Klibc 1.1.2 Klibc Project Klibc 1.1.3 Klibc Project Klibc 1.1.4 Klibc Project Klibc 1.1.5 Klibc Project Klibc 1.1.6 Klibc Project Klibc 1.1.7 Klibc Project Klibc 1.1.8 Klibc Project Klibc 1.1.9 Klibc Project Klibc 1.1.10 Klibc Project Klibc 1.1.11 Klibc Project Klibc 1.1.12 Klibc Project Klibc 1.1.13 Klibc Project Klibc 1.1.14 Klibc Project Klibc 1.1.15 Klibc Project Klibc 1.1.16 Klibc Project Klibc 1.2 Klibc Project Klibc 1.2.1 Klibc Project Klibc 1.2.2 Klibc Project Klibc 1.2.3 Klibc Project Klibc 1.2.4 Klibc Project Klibc 1.2.5 Klibc Project Klibc 1.2.6 Klibc Project Klibc 1.2.7 Klibc Project Klibc 1.2.8 Klibc Project Klibc 1.3 Klibc Project Klibc 1.3.1 Klibc Project Klibc 1.3.2 Klibc Project Klibc 1.3.3 Klibc Project Klibc 1.3.4 Klibc Project Klibc 1.3.5 Klibc Project Klibc 1.3.6 Klibc Project Klibc 1.3.7 Klibc Project Klibc 1.3.8 Klibc Project Klibc 1.3.9 Klibc Project Klibc 1.3.10 Klibc Project Klibc 1.3.11 Klibc Project Klibc 1.3.12 Klibc Project Klibc 1.3.13 Klibc Project Klibc 1.3.14 Klibc Project Klibc 1.3.15 Klibc Project Klibc 1.3.16 Klibc Project Klibc 1.3.17 Klibc Project Klibc 1.3.18 Klibc Project Klibc 1.3.19 Klibc Project Klibc 1.3.20 Klibc Project Klibc 1.3.21 Klibc Project Klibc 1.3.22 Klibc Project Klibc 1.3.23 Klibc Project Klibc 1.3.24 Klibc Project Klibc 1.3.25 Klibc Project Klibc 1.3.26 Klibc Project Klibc 1.3.27 Klibc Project Klibc 1.3.28 Klibc Project Klibc 1.3.29 Klibc Project Klibc 1.3.30 Klibc Project Klibc 1.3.31 Klibc Project Klibc 1.3.32 Klibc Project Klibc 1.3.33 Klibc Project Klibc 1.3.34 Klibc Project Klibc 1.3.35 Klibc Project Klibc 1.3.36 Klibc Project Klibc 1.3.37 Klibc Project Klibc 1.3.38 Klibc Project Klibc 1.3.39 Klibc Project Klibc 1.3.40 Klibc Project Klibc 1.4 Klibc Project Klibc 1.4.1 Klibc Project Klibc 1.4.2 Klibc Project Klibc 1.4.3 Klibc Project Klibc 1.4.4 Klibc Project Klibc 1.4.5 Klibc Project Klibc 1.4.6 Klibc Project Klibc 1.4.7 Klibc Project Klibc 1.4.8 Klibc Project Klibc 1.4.9 Klibc Project Klibc 1.4.10 Klibc Project Klibc 1.4.11 Klibc Project Klibc 1.4.12 Klibc Project Klibc 1.4.13 Klibc Project Klibc 1.4.14 Klibc Project Klibc 1.4.15 Klibc Project Klibc 1.4.16 Klibc Project Klibc 1.4.17 Klibc Project Klibc 1.4.18 Klibc Project Klibc 1.4.19 Klibc Project Klibc 1.4.20 Klibc Project Klibc 1.4.21 Klibc Project Klibc 1.4.22 Klibc Project Klibc 1.4.23 Klibc Project Klibc 1.4.24 Klibc Project Klibc 1.4.25 Klibc Project Klibc 1.4.26 Klibc Project Klibc 1.4.27 Klibc Project Klibc 1.4.28 Klibc Project Klibc 1.4.29 Klibc Project Klibc 1.4.30 Klibc Project Klibc 1.4.31 Klibc Project Klibc 1.4.32 Klibc Project Klibc 1.4.33 Klibc Project Klibc 1.4.34 Klibc Project Klibc 1.4.35 Klibc Project Klibc 1.4.36 Klibc Project Klibc 1.4.37 Klibc Project Klibc 1.4.38 Klibc Project Klibc 1.4.39 Klibc Project Klibc 1.5 Klibc Project Klibc 1.5.1 Klibc Project Klibc 1.5.2 Klibc Project Klibc 1.5.3 Klibc Project Klibc 1.5.4 Klibc Project Klibc 1.5.5 Klibc Project Klibc 1.5.6 Klibc Project Klibc 1.5.7 Klibc Project Klibc 1.5.8 Klibc Project Klibc 1.5.9 Klibc Project Klibc 1.5.10 Klibc Project Klibc 1.5.11 Klibc Project Klibc 1.5.12 Klibc Project Klibc 1.5.13 Klibc Project Klibc 1.5.14 Klibc Project Klibc 1.5.15 Klibc Project Klibc 1.5.16 Klibc Project Klibc 1.5.17 Klibc Project Klibc 1.5.18 Klibc Project Klibc 1.5.19 Klibc Project Klibc 1.5.20 Klibc Project Klibc 1.5.21 Klibc Project Klibc 1.5.22 Klibc Project Klibc 1.5.23 Klibc Project Klibc 1.5.24 Klibc Project Klibc 1.5.25 Klibc Project Klibc 2.0 Klibc Project Klibc 2.0.1 Klibc Project Klibc 2.0.2 Klibc Project Klibc 2.0.3 Klibc Project Klibc 2.0.4 Klibc Project Klibc 2.0.5 Klibc Project Klibc 2.0.6 Klibc Project Klibc 2.0.7	372
OS	Debian Debian Debian Linux 9.0	1

Common Weakness Enumeration (CWE)

CWE-190 - Integer Overflow or Wraparound

Common Attack Pattern Enumeration and Classification (CAPEC)

Forced Integer Overflow
This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References