Vulnerabilities > Uclibc NG Project > Uclibc NG > 1.0.40
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-29 | CVE-2022-29503 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. | 9.8 |
| 2022-05-06 | CVE-2022-30295 | Use of Insufficiently Random Values vulnerability in multiple products uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. | 6.5 |