Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Gentoo: 202304-15 High: glibc Integer Overflow Remote Threat

gentoo
Calendar Grey March 25, 2003
Dist Gentoo Esm H88
A crucial advisory from Gentoo Linux highlights vulnerabilities in glibc related to integer overflows, stressing the need for immediate security patches and updates
The xdrmem_getbytes() function in the XDR library provided by Sun Microsystems contains an integer overflow.

Summary

 
- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200303-22
- - ---------------------------------------------------------------------

- - ---------------------------------------------------------------------

- From advisory:

"The xdrmem_getbytes() function in the XDR library provided by Sun Microsystems contains an integer overflow. Depending on the location and use of the vulnerable xdrmem_getbytes() routine, various conditions may be presented that can permit an attacker to remotely exploit a service using this vulnerable routine."

Read the full advisory at: 
Privileged Access Management, Cyber Security, and… | BeyondTrust

SOLUTION

It is recommended that all Gentoo Linux users who are running
sys-libs/glibc upgrade to glibc-2.3.1-r4 (arm: glibc-2.2.5-r8) as follows:

emerge sync
emerge glibc
emerge clean

...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo remote exploit glibc integer overflow

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
important
Lowest
Low
Medium
High
Critical

PACKAGE : glibc
SUMMARY : integer overflow
DATE : 2003-03-25 08:49 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <2.3.1-r4 (arm: <2.2.5-r8) : fixed version>=2.3.1-r4 (arm: >=2.2.5-r8)
CVE : CAN-2003-0028

Topics%20covered

Topics Covered

security advisory gentoo remote exploit glibc integer overflow

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here