Debian/newlib: critical 9.8
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function.
Action: Upgrade newlib to 4.4.0.20231231-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.0.20231231-2 | - |
Fixed versions
| 4.4.0.20231231-2 |
Sources
- osv: DEBIAN-CVE-2024-30949#Debian:14/newlib
- https://security-tracker.debian.org/tracker/CVE-2024-30949
published · modified · JSON