Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
opensuse leap 42.1 |
||
opensuse opensuse 13.2 |
||
gnu glibc |
||
canonical ubuntu linux 16.04 |
||
canonical ubuntu linux 14.04 |
||
canonical ubuntu linux 12.04 |
||
canonical ubuntu linux 18.04 |
Nexus and Pixel owners get their fixes on US Tuesday. The rest of us peasants have to wait
Google has teased 47 Android patches for Nexus and Pixel devices. Among the critical bugs in the Android Security Bulletin, five concern the media framework, one is system-level, four hit Qualcomm components. The worst, Google said, is one of the media framework bugs, not yet fully disclosed, but it “could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process”. Two of the media framework bugs only affect Android 6.0 (31 p...
Vulmon