Florian Weimer 6890b8a3ae CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) ...

The sunrpc function svcunix_create suffers from a stack-based buffer
overflow with overlong pathname arguments.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit f545ad4928fa1f27a3075265182b38a4f939a5f7)

2022-01-17 11:49:25 +01:00

..

rpc

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

auth_des.c

Change most internal uses of __gettimeofday to __clock_gettime.

2019-10-30 17:04:10 -03:00

auth_none.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

auth_unix.c

Change most internal uses of __gettimeofday to __clock_gettime.

2019-10-30 17:04:10 -03:00

authdes_prot.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

authuxprot.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

clnt_gen.c

CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)

2022-01-17 11:48:59 +01:00

clnt_perr.c

sunrpc: Turn clnt_sperrno into a libc_hidden_nolink_sunrpc symbol

2020-07-07 20:19:57 +02:00

clnt_raw.c

sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro

2018-06-26 15:27:03 +02:00

clnt_simp.c

sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro

2018-06-26 15:27:03 +02:00

clnt_tcp.c

Consistently use uintN_t not u_intN_t everywhere.

2017-08-07 19:55:34 +00:00

clnt_udp.c

Disable -Wmaybe-uninitialized for total_deadline in sunrpc/clnt_udp.c.

2019-10-02 21:12:17 +00:00

clnt_unix.c

Consistently use uintN_t not u_intN_t everywhere.

2017-08-07 19:55:34 +00:00

create_xid.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

des_crypt.c

Disallow use of DES encryption functions in new programs.

2018-06-29 16:53:18 +02:00

des_impl.c

Prefer https to http for gnu.org and fsf.org URLs

2019-09-07 02:43:31 -07:00

des_soft.c

Disallow use of DES encryption functions in new programs.

2018-06-29 16:53:18 +02:00

get_myaddr.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

getrpcport.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

key_call.c

Force building with -fno-common

2021-07-09 20:09:14 +02:00

key_prot.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

Makefile

CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)

2022-01-17 11:49:25 +01:00

netname.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

openchild.c

…

pm_getmaps.c

Consolidate non cancellable close call

2017-08-18 18:38:55 -03:00

pm_getport.c

sunrpc: Remove internal_function attribute

2017-08-31 15:59:02 +02:00

pmap_clnt.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

pmap_prot2.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

pmap_prot.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

pmap_rmt.c

sunrpc: Remove internal_function attribute

2017-08-31 15:59:02 +02:00

publickey.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

rpc_cmsg.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

rpc_common.c

Force building with -fno-common

2021-07-09 20:09:14 +02:00

rpc_dtable.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

rpc_gethostbyname.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

rpc_prot.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

rpc_thread.c

libc: Extend __libc_freeres framework (Bug 23329).

2018-06-29 22:39:06 -04:00

rtime.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

svc_auth.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

svc_authux.c

…

svc_raw.c

sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro

2018-06-26 15:27:03 +02:00

svc_run.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

svc_simple.c

sunrpc: Remove always-defined _RPC_THREAD_SAFE_ macro

2018-06-26 15:27:03 +02:00

svc_tcp.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

svc_udp.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

svc_unix.c

CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)

2022-01-17 11:49:25 +01:00

svc.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

svcauth_des.c

Force building with -fno-common

2021-07-09 20:09:14 +02:00

test-rpcent.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

thrsvc.c

…

tst-bug22542.c

sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)

2022-01-17 11:49:01 +01:00

tst-bug28768.c

CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)

2022-01-17 11:49:25 +01:00

tst-getmyaddr.c

…

tst-svc_register.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-udp-error.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-udp-garbage.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-udp-nonblocking.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-udp-timeout.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-xdrmem2.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

tst-xdrmem.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

Versions

…

xcrypt.c

sunrpc: Remove internal_function attribute

2017-08-31 15:59:02 +02:00

xdr_array.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

xdr_float.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

xdr_intXX_t.c

Update copyright dates with scripts/update-copyrights

2021-01-02 12:17:34 -08:00

xdr_mem.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

xdr_rec.c

sunrpc: Remove internal_function attribute

2017-08-31 15:59:02 +02:00

xdr_ref.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

xdr_sizeof.c

Include shlib-compat.h in many sunrpc/nis source files.

2017-06-04 11:31:28 -04:00

xdr_stdio.c

Consistently use uintN_t not u_intN_t everywhere.

2017-08-07 19:55:34 +00:00

xdr.c

sunrpc: Fix typo in xdr_string comment

2021-02-08 13:55:03 +01:00