Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
•added 2024/04/05 3:39 p.m.•46 views

whoami stack buffer overflow on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

7.7AI score
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/04/05 3:39 p.m.•88 views

GHSA-W5W5-8VFH-XCJQ whoami stack buffer overflow on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

8.2CVSS7.7AI score
SaveExploits0References4
osv_rustsec
osv_rustsec
•added 2024/02/28 12:00 p.m.•52 views

RUSTSEC-2024-0020 Stack buffer overflow with whoami on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

7.7AI score
SaveExploits0References3
RustSec
RustSec
•added 2024/02/28 12:00 p.m.•26 views

Stack buffer overflow with whoami on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

7.7AI score
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2018/02/05 4:29 p.m.•24 views

CVE-2015-1416

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...

7.8CVSS7.6AI score
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2018/02/05 4:29 p.m.•36 views

CVE-2015-1416

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...

9.3CVSS7.2AI score0.03469EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2018/02/05 4:29 p.m.•21 views

DEBIAN-CVE-2015-1416

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...

7.8CVSS7.7AI score0.03469EPSS
SaveExploits0References1
CVE
CVE
•added 2018/02/05 4:00 p.m.•87 views

CVE-2015-1416

The CVE-2015-1416 issue affects the patch utilities used on FreeBSD and related systems. Specifically, the patch tool (patch(1)) in FreeBSD versions 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; as well as Bitrig, and GNU patch before 2.2.5, may execute...

9.3CVSS7.9AI score0.03469EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2018/02/05 4:00 p.m.•88 views

CVE-2015-1416

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...

8AI score0.03469EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/05 12:00 a.m.•8 views

CVE-2015-1416: Undefined Security Weakness

Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...

9.3CVSS7.8AI score0.03469EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/05 12:00 a.m.•7 views

PT-2018-4343

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 10.2-RC1-p1 FreeBSD versions prior to 10.2-BETA2-p2 FreeBSD versions prior to 10.1-RELEASE-p16 GNU patch versions prior to 2.2.5 Bitrig affected versions not specified Larry Wall's patch affected versions not specifie...

9.3CVSS0.03469EPSS
SaveExploits0References11
Rows per page
Query Builder