Attestkeep
Sprache: Deutsch
Loslegen

Schwachstellen / CVE-2002-0391

kritisch

CVE-2002-0391

security flaw

Veröffentlicht Geändert CWE 190
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Red Hat (hoch).

Beschreibung

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
debian 11acm, dietlibc, glibc und 2 weitere5.0-10 und 4 weitere
debian 12acm, dietlibc, glibc und 2 weitere5.0-10 und 4 weitere
debian 13acm, dietlibc, glibc und 2 weitere5.0-10 und 4 weitere
debian 14dietlibc, glibc, krb50.20-0cvs20020808 und 2 weitere
echoacm, dietlibc, glibc und 2 weitere5.0-10 und 4 weitere
root.io debian 11rootio-glibc2.2.5-13
root.io debian 12rootio-glibc, rootio-krb52.2.5-13 und 1 weitere
root.io debian 13rootio-glibc, rootio-krb52.2.5-13 und 1 weitere
Alle 28 Einträge aus 8 Quellen zeigen
QuellePaketBehoben in
debian 11acm5.0-10
debian 11dietlibc0.20-0cvs20020808
debian 11glibc2.2.5-13
debian 11krb51.2.5-2
debian 11openafs1.2.6-1
debian 12acm5.0-10
debian 12dietlibc0.20-0cvs20020808
debian 12glibc2.2.5-13
debian 12krb51.2.5-2
debian 12openafs1.2.6-1
debian 13acm5.0-10
debian 13dietlibc0.20-0cvs20020808
debian 13glibc2.2.5-13
debian 13krb51.2.5-2
debian 13openafs1.2.6-1
debian 14dietlibc0.20-0cvs20020808
debian 14glibc2.2.5-13
debian 14krb51.2.5-2
echoacm5.0-10
echodietlibc0.20-0cvs20020808
echoglibc2.2.5-13
echokrb51.2.5-2
echoopenafs1.2.6-1
root.io debian 11rootio-glibc2.2.5-13
root.io debian 12rootio-glibc2.2.5-13
root.io debian 12rootio-krb51.2.5-2
root.io debian 13rootio-glibc2.2.5-13
root.io debian 13rootio-krb51.2.5-2

Referenzen

Alle 41 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.