libuv: Buffer Overread

libuv: Buffer Overread A buffer overread vulnerability has been found in libuv. libuv 2024-01-16 2024-01-16 800986 remote 1.41.1 1.41.1

libuv is a multi-platform support library with a focus on asynchronous I/O.

libuv fails to ensure that a pointer lies within the bounds of a defined buffer in the uv__idna_toascii() function before reading and manipulating the memory at that address.

The overread can result in information disclosure or application crash.

There is no known workaround at this time.

All libuv users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-libs/libuv-1.41.1"

CVE-2021-22918 ajak graaff