CVE-2021-31870: Buffer Overflow
An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/klibcto a version that resolves this vulnerability.Fixed in 2.0.9-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31870?
CVE-2021-31870 has a medium severity rating due to the potential for exploitation through a heap buffer overflow.
How do I fix CVE-2021-31870?
To fix CVE-2021-31870, update klibc to version 2.0.9 or later.
What are the potential impacts of CVE-2021-31870?
The potential impacts of CVE-2021-31870 include memory corruption and remote code execution due to a heap buffer overflow.
Which software is affected by CVE-2021-31870?
CVE-2021-31870 affects klibc versions before 2.0.9 and Debian Linux version 9.0.
What is the nature of the vulnerability in CVE-2021-31870?
CVE-2021-31870 involves an integer overflow in the calloc() function leading to a heap buffer overflow.