Report
glibc CVE-2022-23218: Stack Buffer Overflow in clnt_create() with UNIX socket paths
84775ab7-5a1f-4656-83fc-70c26d985e0b
A stack buffer overflow vulnerability exists in glibc's sunrpc implementation when the clnt_create() function processes UNIX domain socket paths. When a user supplies a hostname/path longer than 108 bytes for the "unix" protocol, strcpy() copies the entire string into a fixed-size 108-byte buffer (sun.sun_path) on the stack without bounds checking, causing a buffer overflow.