REDHAT-BUG-2042013: Buffer Overflow
The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
Reference: https://sourceware.org/bugzilla/showbug.cgi?id=28768
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2042013?
The severity of REDHAT-BUG-2042013 is considered critical due to potential denial of service and security implications.
How do I fix REDHAT-BUG-2042013?
To fix REDHAT-BUG-2042013, upgrade the GNU C Library to a version higher than 2.34 that includes the necessary patches.
What systems are affected by REDHAT-BUG-2042013?
REDHAT-BUG-2042013 affects systems running GNU C Library version 2.34 and lower.
What issue does REDHAT-BUG-2042013 describe?
REDHAT-BUG-2042013 describes a buffer overflow vulnerability in the svcunix_create function of the sunrpc module.
Can REDHAT-BUG-2042013 lead to code execution?
Yes, REDHAT-BUG-2042013 can potentially lead to code execution due to the buffer overflow, though primarily it may result in denial of service.