projects / glibc.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 47342f5) | patch
[PATCH] CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
authorFlorian Weimer <fweimer@redhat.com>
Mon, 17 Jan 2022 09:21:34 +0000 (10:21 +0100)
committerAdrian Bunk <bunk@debian.org>
Sat, 29 Jun 2024 10:27:34 +0000 (13:27 +0300)
commit3fbabcbef6bf4bf6761f0cd51b0ac26d79e019fe
treed6f24d996c35b23af03c6c266057f01e85137060tree | snapshot
parent47342f564a827598164ce24a8d39374af9eebacdcommit | diff
[PATCH] CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)

The sunrpc function svcunix_create suffers from a stack-based buffer
overflow with overlong pathname arguments.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Helmut Grohne: Ported to glibc 2.28. Inlined __sockaddr_un_set.

Gbp-Pq: Topic all
Gbp-Pq: Name git-CVE-2022-23218-Buffer-overflow-in-sunrpc-svcunix_cre.diff
sunrpc/Makefile diff | blob | history
sunrpc/svc_unix.c diff | blob | history
sunrpc/tst-bug28768.c [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.