Lucene search
+L

71 matches found

OSV
OSV
•added 2025/02/10 2:47 p.m.•17 views

USN-7259-3 eglibc vulnerability

USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a...

6.2CVSS6.9AI score0.00356EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/10 2:26 p.m.•9 views

USN-7259-2 glibc vulnerability

USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a...

6.2CVSS6.9AI score0.00356EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2025/02/06 1:12 p.m.•185 views

USN-7259-1: GNU C Library vulnerability

It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

6.2CVSS7.1AI score0.00356EPSS
SaveExploits0
OSV
OSV
•added 2025/01/26 3:20 a.m.•24 views

MGASA-2025-0026 Updated glibc packages fix security vulnerability

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. CVE-2025-0395...

6.2CVSS7.4AI score0.00356EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/01/22 1:11 p.m.•9 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.6AI score0.00356EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/01/22 1:11 p.m.•19 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.8AI score0.00356EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•11 views

PT-2025-3866

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.13 through 2.40 Description The issue is related to the assert function in the GNU C Library, which fails to allocate sufficient space for the assertion failure message string and size information. This may lead to a...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References78
Redos
Redos
•added 2024/09/23 12:00 a.m.•48 views

ROS-20240923-02

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

8.8CVSS9.8AI score0.02155EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2024/08/09 12:00 a.m.•15 views

The vulnerability of the BIND DNS server, related to the use of the assert() function or similar operators, allows attackers to cause a service failure.

The vulnerability of the BIND DNS server relates to the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

7.8CVSS7.5AI score0.02111EPSS
SaveExploits0References14Affected Software9
BDU FSTEC
BDU FSTEC
•added 2024/01/30 12:00 a.m.•11 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Linux operating systems allow a perpetrator to trigger a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Linux operating systems is related to the use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS6.8AI score0.00738EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
•added 2023/11/14 12:00 a.m.•14 views

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the DNS BIND server is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS7.6AI score0.16115EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•12 views

The vulnerability of embedded software developed by Qualcomm, related to the lack of use of the assert() function, allows a malicious actor to cause service failures.

The vulnerability of embedded software developed for Qualcomm chips lies in the lack of utilization of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.00324EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/07 12:00 a.m.•19 views

The vulnerability of the Demon Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon rpd in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause service interruptions...

5.5CVSS6.5AI score0.00194EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/04/20 12:00 a.m.•15 views

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...

7.8CVSS6.4AI score0.01348EPSS
SaveExploits0References6Affected Software3
Redos
Redos
•added 2023/04/20 12:00 a.m.•43 views

ROS-20230420-02

A vulnerability in the iconv function of the glibc library is related to a flaw in the use of the assert function. The vulnerability allows an attacker acting remotely to cause a denial of service...

7.5CVSS8.3AI score0.03093EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/07/15 12:00 a.m.•14 views

The vulnerability of the Garbage Collector component in Firefox browsers allows a hacker to trigger a service failure.

The vulnerability of the Garbage Collector component in Firefox browsers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5CVSS5.8AI score0.00346EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•14 views

The vulnerability of embedded software developed by Qualcomm, related to the use of the assert() function or similar operators, allows attackers to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips lies in the use of the assert function or similar operators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.00587EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/06 12:00 a.m.•17 views

The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS6.5AI score0.03589EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•15 views

The vulnerability of the slapd server in the LDAP protocol OpenLDAP implementation, related to the lack of use of the assert() function, allows a attacker to cause a service failure.

The vulnerability of the slapd server in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures using a malicious package...

7.5CVSS7.2AI score0.02858EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•13 views

The vulnerability of the open implementation of the OpenLDAP protocol, related to the lack of use of the assert() function, allows a violator to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted package with a short timestamp...

7.8CVSS6.8AI score0.77236EPSS
SaveExploits0References15Affected Software7
Rows per page
Query Builder