CVE-2022-29503 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Uclibc-ng
Severity
9.8CRITICALNVD
EPSS
0.6%
top 30.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 29
Latest updateSep 30
Description
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages12 packages
🔴Vulnerability Details
2📋Vendor Advisories
2Microsoft▶
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create t↗2022-09-13
Debian▶
CVE-2022-29503: uclibc - A memory corruption vulnerability exists in the libpthread linuxthreads function...↗2022