A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory     allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer     overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
    (CVE-2021-3420)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory
    allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer
    overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
    (CVE-2021-3420)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-267c08cc40 advisory.

  - A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory     allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer     overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
    (CVE-2021-3420)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-332fb9c796 advisory.

  - A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory     allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer     overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
    (CVE-2021-3420)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
223788	Linux Distros Unpatched Vulnerability : CVE-2021-3420	Nessus	Misc.	Local	critical
405724	Alpine: multiple newlib packages: security update to 4.1.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
405724	Alpine: multiple newlib packages: security update to 4.1.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
147745	Fedora 33 : arm-none-eabi-newlib (2021-267c08cc40)	Nessus	Fedora Local Security Checks	Local	critical
147734	Fedora 32 : arm-none-eabi-newlib (2021-332fb9c796)	Nessus	Fedora Local Security Checks	Local	critical

Detections

Analytics

CVE-2021-3420

critical

Tenable Plugins

critical

critical

critical

critical

critical