This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-31873 →

DEBIAN-CVE-2021-31873

An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and a subsequent heap buffer overf...

Original description

The description as published by the source.

An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and a subsequent heap buffer overflow.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 klibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-6"}]}]

Debian:13 klibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-6"}]}]

Debian:14 klibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-6"}]}]

References

advisory security-tracker.debian.org