Approved changes feed: RSS · Atom
cpe:2.3:a:uclibc:uclibc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Uclibc (1f1b34a6-325f-5850-97c7-fbf31e53cf92) |
|---|---|
| Product | Uclibc (2efe5b29-c6f9-5ebf-ac7e-14c3ef8e06f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kraj/uclibc |
purl2cpe | 2026-06-01 10:16:58.584845 |
pkg:rpm/fedora/uclibc |
purl2cpe | 2026-06-01 10:16:58.584848 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30295 |
vulnerable | 2026-06-08 05:43:37.846388 |
Details available
uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.
Published: 2022-05-06T04:43:47.000Z
Updated: 2024-08-03T06:48:34.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29503 |
vulnerable | 2026-06-08 05:42:48.283088 |
Details available
HIGH (8.1)
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
Published: 2022-09-29T16:35:09.040Z
Updated: 2025-04-15T18:49:23.011Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43523 |
vulnerable | 2026-06-08 05:36:43.481930 |
Details available
In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution, XSS, applications crashes, etc.). In other words, a validation step, which is expected in any stub resolver, does not occur.
Published: 2021-11-10T14:03:56.000Z
Updated: 2025-05-05T16:46:05.077Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.