uClibc, uClibc-ng libraries have monotonically increasing DNS transaction ID

ronjor · May 10, 2022

Vulnerability Note VU#473698
Original Release Date: 2022-05-09 | Last Revised: 2022-05-10

Description
The uClibc and the Uclibc-ng software are lightweight C standard libraries intended for use in embedded systems and mobile devices. The uClibc library has not been updated since May of 2012. The newer uClibc-ng is the currently maintained fork of uClibc, as announced on the OpenWRT mailing list in July 2014.
Click to expand...

ronjor · Jul 25, 2022

Original Release Date: 2022-05-09 | Last Revised: 2022-07-12

The uClibc and the Uclibc-ng software are lightweight C standard libraries intended for use in embedded systems and mobile devices. The uClibc library has not been updated since May of 2012. The newer uClibc-ng is the currently maintained fork of uClibc, as announced on the OpenWRT mailing list in July 2014.
Click to expand...

Solution
Apply a patch
If your vendor has developed a patched version of uClibc or uClibc-ng to address this issue, apply the updates provided by your vendor. uClibc-ng was updated to 1.0.41 on 05/20/2022.
Click to expand...

Log in or Sign up

uClibc, uClibc-ng libraries have monotonically increasing DNS transaction ID

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

uClibc, uClibc-ng libraries have monotonically increasing DNS transaction ID

ronjor Global Moderator

ronjor Global Moderator

Useful Searches