CVE-2022-23219: Buffer Overflow
First published: Fri Jan 14 2022(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU glibc | <=2.34 | |
| Oracle Communications Cloud Native Core Binding Support Function | =22.1.3 | |
| Oracle Communications Cloud Native Core Network Function Cloud Native Environment | =22.1.0 | |
| Oracle Communications Cloud Native Core Network Repository Function | =22.1.2 | |
| Oracle Communications Cloud Native Core Network Repository Function | =22.2.0 | |
| Oracle Communications Cloud Native Core Security Edge Protection Proxy | =22.1.1 | |
| Oracle Communications Cloud Native Core Unified Data Repository | =22.2.0 | |
| Oracle Enterprise Operations Monitor | =4.3 | |
| Oracle Enterprise Operations Monitor | =4.4 | |
| Oracle Enterprise Operations Monitor | =5.0 | |
| Debian Debian Linux | =10.0 | |
| debian/glibc | 2.31-13+deb11u11 2.31-13+deb11u10 2.36-9+deb12u8 2.36-9+deb12u7 2.40-3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
- https://security.gentoo.org/glsa/202208-24
- https://sourceware.org/bugzilla/show_bug.cgi?id=22542
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2042018
- https://access.redhat.com/errata/RHSA-2022:0896
- https://access.redhat.com/security/cve/cve-2022-23219
- https://bugzilla.redhat.com/show_bug.cgi?id=2042017
- https://launchpad.net/bugs/cve/CVE-2022-23219
- https://security-tracker.debian.org/tracker/CVE-2022-23219
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23219
- https://nvd.nist.gov/vuln/detail/CVE-2022-23219
- https://ubuntu.com/security/CVE-2022-23219
Frequently Asked Questions
What is CVE-2022-23219?
CVE-2022-23219 is a vulnerability in the GNU C Library (glibc) that allows for a buffer overflow, potentially leading to a denial of service or arbitrary code execution.
What software versions are affected by CVE-2022-23219?
GNU glibc versions up to and including 2.34, Oracle Communications Cloud Native Core Binding Support Function 22.1.3, Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0, Oracle Communications Cloud Native Core Network Repository Function 22.1.2 and 22.2.0, VMware Spring Cloud Gateway 22.1.1, Oracle Communications Cloud Native Core Unified Data Repository 22.2.0, Oracle Enterprise Operations Monitor 4.3, 4.4, and 5.0, and Debian Debian Linux 10.0 are affected by CVE-2022-23219.
How severe is CVE-2022-23219?
CVE-2022-23219 has a severity rating of 9.8 (out of 10), indicating a critical vulnerability.
How can I fix CVE-2022-23219?
To fix CVE-2022-23219, users should update to a patched version of the GNU C Library (glibc) or apply any available security patches provided by the software vendor.
Are there any references for CVE-2022-23219?
Yes, you can find more information about CVE-2022-23219 at the following references: [1] https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html [2] https://security.gentoo.org/glsa/202208-24 [3] https://sourceware.org/bugzilla/show_bug.cgi?id=22542
- agent/type
- agent/severity
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-23219
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/gnu
- canonical/gnu glibc
- version/gnu glibc/2.34
- vendor/oracle
- canonical/oracle communications cloud native core binding support function
- version/oracle communications cloud native core binding support function/22.1.3
- canonical/oracle communications cloud native core network function cloud native environment
- version/oracle communications cloud native core network function cloud native environment/22.1.0
- canonical/oracle communications cloud native core network repository function
- version/oracle communications cloud native core network repository function/22.1.2
- version/oracle communications cloud native core network repository function/22.2.0
- canonical/oracle communications cloud native core security edge protection proxy
- version/oracle communications cloud native core security edge protection proxy/22.1.1
- canonical/oracle communications cloud native core unified data repository
- version/oracle communications cloud native core unified data repository/22.2.0
- canonical/oracle enterprise operations monitor
- version/oracle enterprise operations monitor/4.3
- version/oracle enterprise operations monitor/4.4
- version/oracle enterprise operations monitor/5.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- package-manager/debian