CVE-2022-29503: Buffer Overflow

Published Sep 29, 2022

Updated

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.

Affected Software

4 affected components

uClibc uClibc=0.9.33.2

Uclibc-ng Project Uclibc-ng=1.0.40

Anker Eufy Homebase 2 Firmware=2.1.8.8h

Anker Eufy Homebase 2

Event History

Sep 29, 2022

CVE Published

via MITRE·04:35 PM

Data Sourced

via MITRE·04:35 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-29503?

CVE-2022-29503 has a severity rating that indicates a significant risk of memory corruption due to thread allocation.

How do I fix CVE-2022-29503?

To fix CVE-2022-29503, update to the latest versions of uClibC or uClibC-ng that address this vulnerability.

What versions are affected by CVE-2022-29503?

CVE-2022-29503 affects uClibC version 0.9.33.2 and uClibC-ng version 1.0.40.

What happens if CVE-2022-29503 is exploited?

Exploitation of CVE-2022-29503 can lead to memory corruption, potentially allowing an attacker to disrupt services or execute arbitrary code.

Is CVE-2022-29503 related to any specific devices?

Yes, CVE-2022-29503 is also noted to affect Anker Eufy Homebase 2 firmware version 2.1.8.8h.