71 matches found
CVE-2018-8121
Technical details for CVE-2018-8121 are not publicly available in the provided connected documents. No specific affected products, root cause, impacts, or remediation are described here; monitor for updates.
Microsoft Windows Kernel CVE-2018-8121 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version...
CVE-2017-8121
CVE-2017-8121 corresponds to an information disclosure vulnerability in Huawei UMA products. The UMA software variants V200R001 and V300R001 are affected, with an attacker able to obtain some sensitive information leading to information leakage. The entry is corroborated by NVD and Huawei’s secur...
USN-2985-2 GNU C Library regression | Cloud Foundry
USN-2985-2 GNU C Library regression Medium Vendor GNU C, Canonical Ubuntu Versions Affected Ubuntu 14.04 LTS Description USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but were not full...
Ubuntu 14.04 LTS : GNU C Library regression (USN-2985-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2985-2 advisory. USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but...
Ubuntu: Security Advisory (USN-2985-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2985-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3480-1 : eglibc - security update
Several vulnerabilities have been fixed in the GNU C Library, eglibc. The CVE-2015-7547 vulnerability listed below is considered to have critical impact. - CVE-2014-8121 Robin Hack discovered that the nssfiles database did not correctly implement enumeration interleaved with name-based or ID-base...
[SECURITY] [DSA 3480-1] eglibc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3480-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3480-1] eglibc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3480-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3480-1 (eglibc - security update)
Several vulnerabilities have been fixed in the GNU C Library, eglibc. The CVE-2015-7547 vulnerability listed below is considered to have critical impact. CVE-2014-8121 Robin Hack discovered that the nssfiles database did not correctly implement enumeration interleaved with name-based or ID-based...
Debian: Security Advisory (DSA-3480-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-316-1 : eglibc security update
Several vulnerabilities have been discovered in eglibc that may lead to a privilege escalation or denial of service. Glibc pointer guarding weakness A weakness in the dynamic loader prior has been found. The issue is that the LDPOINTERGUARD in the environment is not sanitized allowing local...
[SECURITY] [DLA 316-1] eglibc security update
Package : eglibc Version : 2.11.3-4+deb6u7 CVE ID : CVE-2014-8121 Bug-Reference : 779587 Several vulnerabilities have been discovered in eglibc that may lead to a privilege escalation or denial of service. Glibc pointer guarding weakness A weakness in the dynamic loader prior has been found. The...
DLA-316-1 eglibc - security update
Bulletin has no description...
Amazon Linux: Security Advisory (ALAS-2015-495)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED11 / SLES11 Security Update : glibc (SUSE-SU-2015:1424-1)
This update for glibc provides fixes for security and non-security issues. These security issues have been fixed : - CVE-2015-1781: Buffer length after padding in resolv/nssdns/dns-host.c. bsc927080 - CVE-2013-2207: ptchown did not properly check permissions for tty files, which allowed local use...
openSUSE Security Update : glibc / glibc-testsuite / glibc-utils / etc (openSUSE-2015-383)
glibc was updated to fix security issues and bugs : - Separate internal state between getXXent and getXXbyYY NSS calls CVE-2014-8121, bsc918187, BZ 18007 - Fix read past end of pattern in fnmatch bsc920338, BZ 17062, BZ 18032, BZ 18036 - Fix buffer overflow in nssdns CVE-2015-1781, bsc927080, BZ...
CVE-2014-8121
DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...
CVE-2014-8121
DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...