The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade musl | Aug 22, 2024 | Feb 13, 2017 |
| Debian | — | Upgrade muslUpgrade tre | Mar 31, 2017 | Oct 27, 2016 |
| Gentoo Linux | — | Upgrade sys-libs/musl.Upgrade dev-libs/tre. | Oct 30, 2017 | Feb 13, 2017 |
| Suse | — | Upgrade go1.14-raceUpgrade cri-o-kubeadm-criconfigUpgrade kubernetes-nodeUpgrade cri-oUpgrade kubernetes-kubelet1.17Upgrade kubernetes-kubeadmUpgrade kubernetes-kubelet1.18Upgrade kubernetes-clientUpgrade kubernetes-masterUpgrade go1.14-docUpgrade cri-toolsUpgrade go1.14Upgrade kubernetes-kubelet-commonUpgrade kubernetes-controller-managerUpgrade kubernetes-proxyUpgrade kubernetes-apiserverUpgrade kubernetes-scheduler | Jan 26, 2018 | Feb 13, 2017 |
| Ubuntu | — | Upgrade musl (Ubuntu Pro) | Mar 22, 2023 | Feb 13, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub