Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2002-0391

kritik

CVE-2002-0391

security flaw

Yayın Değişiklik CWE 190
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek).

Açıklama

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
debian 11acm, dietlibc, glibc ve 2 tane daha5.0-10 ve 4 tane daha
debian 12acm, dietlibc, glibc ve 2 tane daha5.0-10 ve 4 tane daha
debian 13acm, dietlibc, glibc ve 2 tane daha5.0-10 ve 4 tane daha
debian 14dietlibc, glibc, krb50.20-0cvs20020808 ve 2 tane daha
echoacm, dietlibc, glibc ve 2 tane daha5.0-10 ve 4 tane daha
root.io debian 11rootio-glibc2.2.5-13
root.io debian 12rootio-glibc, rootio-krb52.2.5-13 ve 1 tane daha
root.io debian 13rootio-glibc, rootio-krb52.2.5-13 ve 1 tane daha
8 kaynaktaki 28 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
debian 11acm5.0-10
debian 11dietlibc0.20-0cvs20020808
debian 11glibc2.2.5-13
debian 11krb51.2.5-2
debian 11openafs1.2.6-1
debian 12acm5.0-10
debian 12dietlibc0.20-0cvs20020808
debian 12glibc2.2.5-13
debian 12krb51.2.5-2
debian 12openafs1.2.6-1
debian 13acm5.0-10
debian 13dietlibc0.20-0cvs20020808
debian 13glibc2.2.5-13
debian 13krb51.2.5-2
debian 13openafs1.2.6-1
debian 14dietlibc0.20-0cvs20020808
debian 14glibc2.2.5-13
debian 14krb51.2.5-2
echoacm5.0-10
echodietlibc0.20-0cvs20020808
echoglibc2.2.5-13
echokrb51.2.5-2
echoopenafs1.2.6-1
root.io debian 11rootio-glibc2.2.5-13
root.io debian 12rootio-glibc2.2.5-13
root.io debian 12rootio-krb51.2.5-2
root.io debian 13rootio-glibc2.2.5-13
root.io debian 13rootio-krb51.2.5-2

Referanslar

41 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.