CVE-2022-23219CWE-120

CVE-2022-23219

Critical · published January 14, 2022

CVSS v3.1
9.8
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

🔥 A forgotten function in glibc opens a door to catastrophic problems! The clnt_create function can be exploited without validation—talk about a stack overflowing! Think of it like a restaurant that serves unlimited soup, but never checks the size of the bowl you bring. You could walk away with a massive pot of soup, flooding the kitchen—and that’s exactly what this vulnerability does to memory! An attacker could trigger a buffer overflow that either crashes the application, rendering it unusable, or, in a worst-case scenario, execute arbitrary code on the server. This means they could control systems as if they owned them, creating absolute chaos!

Put simply

Think of it like a restaurant that serves unlimited soup, but never checks the size of the bowl you bring. You could walk away with a massive pot of soup, flooding the kitchen—and that’s exactly what this vulnerability does to memory! The deprecated clnt_create function in glibc fails to validate the length of the hostname argument, leading to a buffer overflow. If the system isn't fortified with a stack protector, this flaw can allow attackers to execute arbitrary code remotely.

What to do

An attacker could trigger a buffer overflow that either crashes the application, rendering it unusable, or, in a worst-case scenario, execute arbitrary code on the server. This means they could control systems as if they owned them, creating absolute chaos! Update glibc to version 2.35 or later to eliminate this vulnerability. Additionally, consider enabling stack protectors in your build configurations to add an extra layer of defense. Reviewing applications that use the sunrpc module is also recommended! You've got this! Patch up and lock down your systems to keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04685 · 91.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-01-14T12:15Z
Affected products (11)
ProductVersionsFixed in
gnu/glibc< 2.312.31
oracle/communications_cloud_native_core_binding_support_functionall versions—
oracle/communications_cloud_native_core_network_function_cloud_native_environmentall versions—
oracle/communications_cloud_native_core_network_repository_functionall versions—
oracle/communications_cloud_native_core_network_repository_functionall versions—
oracle/communications_cloud_native_core_security_edge_protection_proxyall versions—
oracle/communications_cloud_native_core_unified_data_repositoryall versions—
oracle/enterprise_operations_monitorall versions—
oracle/enterprise_operations_monitorall versions—
oracle/enterprise_operations_monitorall versions—
debian/debian_linuxall versions—
References (11)
EPSS history
Timeline
  • 14 JAN 00:00Z
    The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack…
    cvelistv5