Vulnetix
Try Vulnetix Request Demo
CVE-2021-3420 PUBLISHED

A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.

EPSS 0.18% · 39.6th percentile

Risk Scores

EPSS Score
0.18%
39.6th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSnewlib4.4.0.20231231-2, 3.3.0-1.3, 0
Ubuntu:22.04:LTSnewlib3.3.0-1.2, 3.3.0-1.3, 3.3.0-1
Ubuntu:20.04:LTSnewlib0, 3.1.0.20181231-1, 3.3.0-0ubuntu1
Ubuntu:16.04:LTSnewlib2.2.0+git20150830.5a3d536-1, 2.1.0+git20141201.db59ff3-2, 0
Ubuntu:18.04:LTSnewlib2.4.0.20160527-3ubuntu0.1, 0, 2.4.0.20160527-3

Timeline

References

Open in Interactive Console →