CVE-2021-31870: Buffer Overflow
Published Apr 30, 2021
·Updated
An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow.
Affected Software
2 affected components
Klibc Project Klibc<2.0.9
Debian Debian Linux=9.0
Remediation
Event History
Apr 30, 2021
CVE Published
via MITRE·05:19 AM
Data Sourced
via MITRE·05:19 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-31870?
CVE-2021-31870 has a medium severity rating due to the potential for exploitation through a heap buffer overflow.
2
How do I fix CVE-2021-31870?
To fix CVE-2021-31870, update klibc to version 2.0.9 or later.
3
What are the potential impacts of CVE-2021-31870?
The potential impacts of CVE-2021-31870 include memory corruption and remote code execution due to a heap buffer overflow.
4
Which software is affected by CVE-2021-31870?
CVE-2021-31870 affects klibc versions before 2.0.9 and Debian Linux version 9.0.
5
What is the nature of the vulnerability in CVE-2021-31870?
CVE-2021-31870 involves an integer overflow in the calloc() function leading to a heap buffer overflow.