glibc/sunrpc
Florian Weimer 0f70b829f8 CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
The sunrpc function svcunix_create suffers from a stack-based buffer
overflow with overlong pathname arguments.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit f545ad4928)
2022-01-18 10:17:11 +01:00
..
rpc Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
auth_des.c Change most internal uses of __gettimeofday to __clock_gettime. 2019-10-30 17:04:10 -03:00
auth_none.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
auth_unix.c Change most internal uses of __gettimeofday to __clock_gettime. 2019-10-30 17:04:10 -03:00
authdes_prot.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
authuxprot.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
clnt_gen.c CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542) 2022-01-18 07:46:02 +01:00
clnt_perr.c sunrpc: Turn clnt_sperrno into a libc_hidden_nolink_sunrpc symbol 2020-07-07 20:19:57 +02:00
clnt_raw.c sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro 2018-06-26 15:27:03 +02:00
clnt_simp.c sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro 2018-06-26 15:27:03 +02:00
clnt_tcp.c Consistently use uintN_t not u_intN_t everywhere. 2017-08-07 19:55:34 +00:00
clnt_udp.c Disable -Wmaybe-uninitialized for total_deadline in sunrpc/clnt_udp.c. 2019-10-02 21:12:17 +00:00
clnt_unix.c Consistently use uintN_t not u_intN_t everywhere. 2017-08-07 19:55:34 +00:00
create_xid.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
des_crypt.c Disallow use of DES encryption functions in new programs. 2018-06-29 16:53:18 +02:00
des_impl.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
des_soft.c Disallow use of DES encryption functions in new programs. 2018-06-29 16:53:18 +02:00
get_myaddr.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
getrpcport.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
key_call.c sunrpc: Do not export key handling hooks by default 2020-07-07 20:19:57 +02:00
key_prot.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
Makefile CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) 2022-01-18 10:17:11 +01:00
netname.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
openchild.c Remove use of INTDEF/INTUSE in libio 2012-05-24 23:06:20 +02:00
pm_getmaps.c Consolidate non cancellable close call 2017-08-18 18:38:55 -03:00
pm_getport.c sunrpc: Remove internal_function attribute 2017-08-31 15:59:02 +02:00
pmap_clnt.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
pmap_prot2.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
pmap_prot.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
pmap_rmt.c sunrpc: Remove internal_function attribute 2017-08-31 15:59:02 +02:00
publickey.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
rpc_cmsg.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
rpc_common.c sunrpc: Remove hidden aliases for global data symbols (bug 26210) 2020-07-08 08:39:39 +02:00
rpc_dtable.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
rpc_gethostbyname.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
rpc_prot.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
rpc_thread.c libc: Extend __libc_freeres framework (Bug 23329). 2018-06-29 22:39:06 -04:00
rtime.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
svc_auth.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
svc_authux.c Obsolete RPC implementation in libc. 2011-04-16 21:59:36 -04:00
svc_raw.c sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro 2018-06-26 15:27:03 +02:00
svc_run.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
svc_simple.c sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro 2018-06-26 15:27:03 +02:00
svc_tcp.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
svc_udp.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
svc_unix.c CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) 2022-01-18 10:17:11 +01:00
svc.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
svcauth_des.c linux: Normalize and return timeout on select (BZ #27651) 2021-04-13 10:15:09 -03:00
test-rpcent.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
thrsvc.c Update. 2002-10-14 18:10:15 +00:00
tst-bug22542.c sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542) 2022-01-18 07:46:03 +01:00
tst-bug28768.c CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) 2022-01-18 10:17:11 +01:00
tst-getmyaddr.c Update. 2004-09-28 23:08:14 +00:00
tst-svc_register.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-udp-error.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-udp-garbage.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-udp-nonblocking.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-udp-timeout.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-xdrmem2.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
tst-xdrmem.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
Versions Exclude rpcent functions and NSS backends for rpc, key when excluding sunrpc. 2015-02-06 10:43:19 -08:00
xcrypt.c sunrpc: Remove internal_function attribute 2017-08-31 15:59:02 +02:00
xdr_array.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
xdr_float.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
xdr_intXX_t.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
xdr_mem.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
xdr_rec.c sunrpc: Remove internal_function attribute 2017-08-31 15:59:02 +02:00
xdr_ref.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
xdr_sizeof.c Include shlib-compat.h in many sunrpc/nis source files. 2017-06-04 11:31:28 -04:00
xdr_stdio.c Consistently use uintN_t not u_intN_t everywhere. 2017-08-07 19:55:34 +00:00
xdr.c Fix fall-through warnings in sunrpc/xdr.c. 2019-02-14 20:35:16 +00:00