Debian Dietlibc vulnerabilities

CVE-2002-0391 [CRITICAL] CVE-2002-0391: acm - Integer overflow in xdr_array function in RPC servers for operating systems that... Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd. Scope: local bookworm: resolved (fixed in 5.0-10) bullseye: resolved (

CVE-2003-0028 [CRITICAL] CVE-2003-0028: dietlibc - Integer overflow in the xdrmem_getbytes() function, and possibly other functions... Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391. Scope: local bookworm: resol

CVE-2012-1577 [CRITICAL] CVE-2012-1577: dietlibc - lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0. lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0. Scope: local bookworm: resolved (fixed in 0.33~cvs20120325-1) bullseye: resolved (fixed in 0.33~cvs20120325-1) forky: resolved (fixed in 0.33~cvs20120325-1) sid: resolved (fixed in 0.33~cvs20120325-1) trixie: resolved (fixed in 0.33~cvs20120325-1)