Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu: USN-5379-1 Critical: Klibc Memory Issues and Denial of Service

ubuntu
Calendar Grey April 18, 2022
Dist Ubuntu Esm H88
Multiple vulnerabilities in klibc have been resolved through recent updates in Ubuntu. A comprehensive summary of the corrections implemented and the systems impacted is available.
Several security issues were fixed in klibc.

Summary

Several security issues were fixed in klibc.

Software Description:

- klibc: small utilities built with klibc for early boot

Details:

It was discovered that klibc did not properly perform

some mathematical operations, leading to an integer overflow.

An attacker could possibly use this issue to cause a crash,

resulting in a denial of service, or possibly execute

arbitrary code. (CVE-2021-31870)

It was discovered that klibc did not properly handled some

memory allocations on 64 bit systems. An attacker could

possibly use this issue to cause a crash, resulting in a

denial of service, or possibly execute arbitrary code.

(CVE-2021-31871)

It was discovered that klibc did not properly handled some file

sizes values on 32 bit systems. An attacker could possibly use

this issue to cause a crash, resulting in a denial of service,

or possibly execute arbitrary code. (CVE-2021-31872)

It was discovered that klibc did not properly handled some

memory allocations. An...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory issues klibc

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   klibc-utils                     2.0.7-1ubuntu5.1
   libklibc                        2.0.7-1ubuntu5.1

Ubuntu 18.04 LTS:
   klibc-utils                     2.0.4-9ubuntu2.1
   libklibc                        2.0.4-9ubuntu2.1

Ubuntu 16.04 ESM:
   klibc-utils                     2.0.4-8ubuntu1.16.04.4+esm1
   libklibc                        2.0.4-8ubuntu1.16.04.4+esm1

Ubuntu 14.04 ESM:
   klibc-utils                     2.0.3-0ubuntu1.14.04.3+esm2
   libklibc                        2.0.3-0ubuntu1.14.04.3+esm2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-5379-1

  CVE-2021-31870, CVE-2021-31871, CVE-2021-31872, CVE-2021-31873

Severity
critical
Lowest
Low
Medium
High
Critical

April 18, 2022

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory issues klibc

Package Information

  https://launchpad.net/ubuntu/+source/klibc/2.0.7-1ubuntu5.1
  https://launchpad.net/ubuntu/+source/klibc/2.0.4-9ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.