The vulnerability of the realpath() function in the glibc system library, which allows a hacker to access confidential information

The vulnerability of the realpath function in the glibc system library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

The vulnerability of the getcwd() function in the system library glibc, which allows a hacker to execute arbitrary code

The vulnerability of the getcwd function in the glibc system library is related to a single-bit offset error. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted application data remotely...

[SECURITY] Fedora 36 Update: shapelib-1.5.0-12.fc36

The Shapefile C Library provides the ability to write simple C programs for reading, writing and updating to a limited extent ESRI Shapefiles, and the associated attribute file .dbf...

Bento4 heap buffer over-read vulnerability

Bento4 is an open source C library for reading and writing MP4 files. Bento4 1.6.0-639 has a security vulnerability for which no detailed vulnerability details are available...

Fedora: Security Advisory for ghc-cmark-gfm (FEDORA-2022-bc43bafcfd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: ghc-cmark-gfm-0.2.3-1.fc35

This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.3 and does not require prior installation of the C library...

glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clntcreate in the sunrpc's clntgen.c module of the GNU C Library aka glibc through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in...

glibc: Off-by-one buffer overflow/underflow in getcwd()

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

USN-5320-1: Expat vulnerabilities and regression

USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required. This update address this regression and several other vulnerabilities. It was discovered that Expat incorrectly handled certain files. An attacker could possibly use...

USN-5310-2: GNU C Library vulnerabilities

USN-5310-1 fixed several vulnerabilities in GNU. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that the GNU C library getcwd function incorrectly handled buffers. An attacker could use this issue to cause the GNU C Library to cras...

[SECURITY] [DLA 2935-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2935-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

Ubuntu 16.04 ESM : GNU C Library vulnerabilities (USN-5310-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5310-2 advisory. USN-5310-1 fixed several vulnerabilities in GNU. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

Fedora: Security Advisory for mingw-expat (FEDORA-2022-3d9d67f558)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-5310-1: GNU C Library vulnerabilities

Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS...

Ubuntu 18.04 LTS / 20.04 LTS : GNU C Library vulnerabilities (USN-5310-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5310-1 advisory. Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An...

PT-2023-5341

Name of the Vulnerable Software and Affected Versions glibc affected versions not specified Description A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is...

CLSA-2022-1646085735 Fix of CVE: CVE-2021-45078

CVE-2021-45078: Fix out-of-bounds write in stabxcoffbuiltintype in stabs.c...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: GNU C library (glibc) vulnerability affects Tivoli Storage Productivity Center (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects Tivoli Storage Productivity Center. Vulnerability Details Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By...

Fedora: Security Advisory for expat (FEDORA-2022-c4786825dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...