CVE-2022-23218CWE-120

CVE-2022-23218

Critical · published January 14, 2022

CVSS v3.1
9.8
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

🔥 A deprecated function in glibc could unleash chaos – it allows buffer overflow without even checking the length of the input! Think of it like trying to fit an oversized suitcase into a tiny overhead compartment on an airplane – it just doesn’t work, and if you force it, everything spills out. That's what happens here when the function copies an excessively long path! An attacker could exploit this oversight to crash your application, resulting in a complete denial of service. In the worst-case scenario, without stack protection, they could execute arbitrary code, potentially gaining full control of the system. Talk about a recipe for disaster!

Put simply

Think of it like trying to fit an oversized suitcase into a tiny overhead compartment on an airplane – it just doesn’t work, and if you force it, everything spills out. That's what happens here when the function copies an excessively long path! The vulnerable function svcunix_create in the sunrpc module of glibc through version 2.34 fails to validate the length of its path argument, leading to a stack-based buffer overflow.

What to do

An attacker could exploit this oversight to crash your application, resulting in a complete denial of service. In the worst-case scenario, without stack protection, they could execute arbitrary code, potentially gaining full control of the system. Talk about a recipe for disaster! Immediately patch to glibc version 2.34 or later where this issue is resolved. Also, ensure that stack protection is enabled when building your applications to mitigate potential risks. Don’t leave your defense to chance! You've got this! With these actions, you can shore up your defenses and keep your systems safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05259 · 92.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-01-14T12:15Z
Affected products (6)
ProductVersionsFixed in
gnu/glibc< 2.312.31
oracle/communications_cloud_native_core_unified_data_repositoryall versions—
oracle/enterprise_operations_monitorall versions—
oracle/enterprise_operations_monitorall versions—
oracle/enterprise_operations_monitorall versions—
debian/debian_linuxall versions—
References (11)
EPSS history
Timeline
  • 14 JAN 00:00Z
    The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack…
    cvelistv5