USN-6762-1

Dashboard / Vulnerabilities / USN-6762-1

USN-6762-1

Summary: eglibc, glibc vulnerabilities

Details: It was discovered that GNU C Library incorrectly handled netgroup requests. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9984) It was discovered that GNU C Library might allow context-dependent attackers to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-20109) It was discovered that GNU C Library when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-11236) It was discovered that the GNU C library getcwd function incorrectly handled buffers. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3999) Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-2961)

References: https://ubuntu.com/security/notices/USN-6762-1, https://ubuntu.com/security/CVE-2014-9984, https://ubuntu.com/security/CVE-2015-20109, https://ubuntu.com/security/CVE-2018-11236, https://ubuntu.com/security/CVE-2021-3999, https://ubuntu.com/security/CVE-2024-2961, https://launchpad.net/bugs/2063328