CVE-2022-29503

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1517 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:uclibc:uclibc:0.9.33.2:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:uclibc-ng_project:uclibc-ng:1.0.40:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:anker:eufy_homebase_2_firmware:2.1.8.8h:*:*:*:*:*:*:*
cpe:2.3:h:anker:eufy_homebase_2:-:*:*:*:*:*:*:*

Information

Published : 2022-09-29 10:15

Updated : 2022-10-03 11:43


NVD link : CVE-2022-29503

Mitre link : CVE-2022-29503


JSON object : View

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

dedicated server usa

Products Affected

uclibc-ng_project

  • uclibc-ng

anker

  • eufy_homebase_2_firmware
  • eufy_homebase_2

uclibc

  • uclibc