A vulnerability has been discovered in libuv, where hostname truncation can lead to attacker-controlled lookups.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libuv | * | < 1.48.0 | >= 1.48.0 |
libuv is a multi-platform support library with a focus on asynchronous I/O.
Multiple vulnerabilities have been discovered in libuv. Please review the CVE identifiers referenced below for details.
The uv_getaddrinfo function in src/unix/getaddrinfo.c truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to create addresses like 0x00007f000001, which are considered valid by getaddrinfo and could allow an attacker to craft payloads that resolve to unintended IP addresses, bypassing developer checks.
There is no known workaround at this time.
All libuv users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libuv-1.48.0"
A buffer overread vulnerability has been found in libuv.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libuv | * | < 1.41.1 | >= 1.41.1 |
libuv is a multi-platform support library with a focus on asynchronous I/O.
libuv fails to ensure that a pointer lies within the bounds of a defined buffer in the uv__idna_toascii() function before reading and manipulating the memory at that address.
The overread can result in information disclosure or application crash.
There is no known workaround at this time.
All libuv users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libuv-1.41.1"
A buffer overflow in libuv might allow remote attacker(s) to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libuv | * | < 1.39.0 | >= 1.39.0 |
libuv is a multi-platform support library with a focus on asynchronous I/O.
libuv used an incorrect buffer size for paths, causing a buffer overflow.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All libuv users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libuv-1.39.0"
A vulnerability in libuv could lead to privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libuv | * | < 1.4.2 | >= 1.4.2 |
libuv is a multi-platform support library with a focus on asynchronous I/O.
It was discovered that libuv does not call setgroups before calling setuid/setgid. If this is not called, then even though the uid has been dropped, there may still be groups associated that permit superuser privileges.
Context-dependent attackers could escalate privileges via unspecified vectors.
There is no known workaround at this time.
All libuv users should upgrade to the latest version:
# emerge --sync # emerge --ask --verbose --oneshot ">=dev-libs/libuv-1.4.2"