2735 matches found
Caryll OTFCC otfccdump+0x4fe954 denial of service vulnerability
Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A denial of service vulnerability exists in Caryll OTFCC, which originates from a segmentation conflict at /release-x64/otfccdump+0x4fe954. An attacker can exploit the vulnerability t...
Vulnerability of the al__cpLocation stream function in libpthread, LinuxThreads libraries uClibC and uClibC-ng, allowing a hacker to execute arbitrary code
The vulnerabilities of the alcpLocation function in the libpthread library, as well as those in the linuxthreads library and uClibC and uClibC-ng libraries, are related to the possibility of memory corruption. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code by...
The vulnerabilities of the `fillin_rpath` and `decompose_rpath` functions in the GNU C Library allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the fillinrpath and decomposerpath functions in the GNU C Library’s system library is related to an unreliable search path. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...
OTFCC has an unspecified vulnerability (CNVD-2023-11793)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /multiarch/memmove-vec-unaligned-erms.S. No detailed vulnerability details are currently available...
OTFCC has an unspecified vulnerability (CNVD-2023-11790)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x4fe9a7. No detailed vulnerability details are currently available...
OTFCC has an unspecified vulnerability (CNVD-2023-11792)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x5266a8. No detailed vulnerability details are currently available...
Debian: Security Advisory (DSA-5236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the LD_LIBRARY_PATH environment variable allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the LDLIBRARYPATH environment variable in the GNU C Library is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
F5 Networks BIG-IP : GNU C Library vulnerability (K64119434)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K64119434 advisory. In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows...
Bento4 Denial of Service Vulnerability (CNVD-2023-27653)
Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial-of-service vulnerability that stems from AP4CttsAtom::Create in its Core/Ap4CttsAtom.cpp component, which may consume too much memory. An attacker could exploit the vulnerability t...
The vulnerability of the netgroupcache.c component of the server caching daemon nscd in the GNU C Library allows a attacker to cause a service failure.
The vulnerability of the netgroupcache.c component, a caching daemon for system name services in the GNU C Library, is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause service failures...
Fedora: Security Advisory for libtar (FEDORA-2022-44a20bba43)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6485: An integer overflow in the implementation of the posix_memalign
Security Advisory ID : BSA-2022-623 Component : GNU C Library Revision : 1.0 An integer overflow in the implementation of the posixmemalign in memalign functions in the GNU C Library aka glibc or libc6 2.26 and earlier could cause these functions to return a pointer to a heap area that is too...
CVE-2014-9984: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer
Security Advisory ID : BSA-2022-607 Component : GNU C Library Revision : 1.1 nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as...
CVE-2019-9169. Heap-based buffer over-read in the GNU C Library. (BSA-2022-776)
Security Advisory ID: BSA-2022-776 Component: GNU C Library Revision: 2.0 In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. Notes: Brocade PSIRT has confirmed that...
[SECURITY] Fedora 37 Update: libtar-1.2.20-25.fc37
libtar is a C library for manipulating tar archives. It supports both the strict POSIX tar format and many of the commonly-used GNU extensions...
DEBIAN-CVE-2021-40647
In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it...
A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.
...
Fedora: Security Advisory for libtar (FEDORA-2022-fe1a4e3cf0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...