lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.
Product
debian/dietlibc vulnerabilities
6 published CVES affecting debian/dietlibc, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 2
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 3
- CISA KEV
- 0
Latest debian/dietlibc CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 1.6%
-
DLA-557-1 dietlibc - security update
PublishedUnknown -
CriticalCVSS 9.8 EPSS 58.1%
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as r...
-
DSA-272 dietlibc - integer overflow
PublishedUnknown -
HighCVSS 7.5 EPSS 15.0%
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in leng...
-
DSA-146 dietlibc - integer overflow
PublishedUnknown
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.