Lucene search
+L

3221 matches found

RedhatCVE
RedhatCVE
•added 2023/02/07 5:56 a.m.•48 views

CVE-2023-0687

A vulnerability was found in the GNU C Library. This flaw affects the monstartup function of the gmon.c of the component Call Graph Monitor file. The manipulation leads to buffer overflow...

9AI score0.01094EPSS
SaveExploits0References3
CVE
CVE
•added 2023/02/07 12:02 a.m.•174 views

CVE-2023-24808

CVE-2023-24808 affects the PDFio C library (reading/writing PDFs) with a denial-of-service flaw in the pdfio parser for versions before 1.1.0. Crafted PDFs can drive the parser to 100% CPU utilization and never terminate, potentially impacting servers or processes that convert uploaded PDFs to pl...

6.5CVSS5.1AI score0.00719EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/02/07 12:02 a.m.•28 views

CVE-2023-24808 Denial Of Service when opening a corrupt PDF file in pdfio

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service DOS vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes this crash found in testing is about 28...

5.3CVSS5.7AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2023/02/07 12:02 a.m.•32 views

CVE-2023-24808

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service DOS vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes this crash found in testing is about 28...

6.5CVSS5.3AI score0.00719EPSS
SaveExploits1
attackerkb
attackerkb
•added 2023/02/06 7:15 p.m.•9 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

9.8CVSS5.7AI score0.01094EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2023/02/06 7:15 p.m.•28 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

9.8CVSS6.8AI score0.01094EPSS
SaveExploits0References4
Prion
Prion
•added 2023/02/06 7:15 p.m.•59 views

Design/Logic Flaw

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

4CVSS9.2AI score0.01094EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2023/02/06 7:15 p.m.•37 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

9.8CVSS5.8AI score0.01094EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•22 views

GNU C Library 安全漏洞

The GNU C Library glibc, libc6 is an open source, free C language compiler released under the LGPL license. A security vulnerability exists in GNU C Library version 2.38. An attacker has exploited the vulnerability to cause a buffer overflow...

9.8CVSS6.2AI score0.01094EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2023/02/06 12:00 a.m.•23 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

4.6CVSS6.8AI score0.01094EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/02/06 12:00 a.m.•54 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

4.6CVSS9.6AI score0.01094EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•1 views

CVE-2023-0687: Buffer Copy without Checking Size of Input

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

9.8CVSS5.3AI score0.01094EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•16 views

PT-2023-1376 · Unknown +2 · Gnu C Library +2

Name of the Vulnerable Software and Affected Versions: GNU C Library version 2.38 Description: A critical issue has been identified in the GNU C Library, affecting the monstartup function of the gmon.c file in the Call Graph Monitor component. This issue leads to a buffer overflow. The inputs tha...

9.8CVSS6.2AI score0.01094EPSS
SaveExploits16References151
Debian CVE
Debian CVE
•added 2023/02/06 12:00 a.m.•92 views

CVE-2023-0687

Removed by vendor...

9.8CVSS5.2AI score0.01094EPSS
SaveExploits0
CVE
CVE
•added 2023/02/06 12:00 a.m.•287 views

CVE-2023-0687

CVE-2023-0687 affects GNU C Library (glibc) 2.38, specifically the __monstartup function in gmon.c of the Call Graph Monitor component. The issue enables a buffer overflow when handling an overly long input argument, with inputs described as addresses of the running application built with gmon en...

9.8CVSS9.2AI score0.01094EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/02/06 12:00 a.m.•22 views

CVE-2023-0687

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246...

4.6CVSS9.4AI score
SaveExploits0References6
OSV
OSV
•added 2023/02/03 6:15 a.m.•13 views

ALPINE-CVE-2023-25139

sprintf in the GNU C Library glibc 2.37 has a buffer overflow out-of-bounds write in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a...

9.8CVSS7.9AI score0.01423EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/03 6:15 a.m.•63 views

CVE-2023-25139

sprintf in the GNU C Library glibc 2.37 has a buffer overflow out-of-bounds write in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a...

9.8CVSS9.6AI score0.01423EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/02/03 6:15 a.m.•51 views

CVE-2023-25139

sprintf in the GNU C Library glibc 2.37 has a buffer overflow out-of-bounds write in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a...

9.8CVSS7.8AI score0.01423EPSS
SaveExploits1References1
CVE
CVE
•added 2023/02/03 12:00 a.m.•455 views

CVE-2023-25139

CVE-2023-25139 affects glibc 2.37. The issue is a buffer overflow in sprintf in certain scenarios when formatting a number with a buffer sized exactly for the string. For example, 1,234,567 padded to 13 may overflow by two bytes. The connected Siemens Tenable plugin repeats this description. The ...

9.8CVSS7.9AI score0.01423EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder