Critical · published January 14, 2022
🔥 A forgotten function in glibc opens a door to catastrophic problems! The clnt_create function can be exploited without validation—talk about a stack overflowing! Think of it like a restaurant that serves unlimited soup, but never checks the size of the bowl you bring. You could walk away with a massive pot of soup, flooding the kitchen—and that’s exactly what this vulnerability does to memory! An attacker could trigger a buffer overflow that either crashes the application, rendering it unusable, or, in a worst-case scenario, execute arbitrary code on the server. This means they could control systems as if they owned them, creating absolute chaos!
Think of it like a restaurant that serves unlimited soup, but never checks the size of the bowl you bring. You could walk away with a massive pot of soup, flooding the kitchen—and that’s exactly what this vulnerability does to memory! The deprecated clnt_create function in glibc fails to validate the length of the hostname argument, leading to a buffer overflow. If the system isn't fortified with a stack protector, this flaw can allow attackers to execute arbitrary code remotely.
An attacker could trigger a buffer overflow that either crashes the application, rendering it unusable, or, in a worst-case scenario, execute arbitrary code on the server. This means they could control systems as if they owned them, creating absolute chaos! Update glibc to version 2.35 or later to eliminate this vulnerability. Additionally, consider enabling stack protectors in your build configurations to add an extra layer of defense. Reviewing applications that use the sunrpc module is also recommended! You've got this! Patch up and lock down your systems to keep those pesky attackers at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gnu/glibc | < 2.31 | 2.31 |
| oracle/communications_cloud_native_core_binding_support_function | all versions | — |
| oracle/communications_cloud_native_core_network_function_cloud_native_environment | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_network_repository_function | all versions | — |
| oracle/communications_cloud_native_core_security_edge_protection_proxy | all versions | — |
| oracle/communications_cloud_native_core_unified_data_repository | all versions | — |
| oracle/enterprise_operations_monitor | all versions | — |
| oracle/enterprise_operations_monitor | all versions | — |
| oracle/enterprise_operations_monitor | all versions | — |
| debian/debian_linux | all versions | — |