CVE-2015-8982

Integer overflow in the strxfrm function in the GNU C Library aka glibc or libc6 before 2.21 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow...

CVE-2015-8984

The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash via a malformed pattern, which triggers an out-of-bounds read...

UBUNTU-CVE-2015-8984

The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash via a malformed pattern, which triggers an out-of-bounds read...

GNU C Library Name Service Switch Privilege Bypass Vulnerability

GNU C Library is an open source, free C compiler released under the LGPL license. A security vulnerability in the 'getcontents' function in the nssfiles/files-XXX.c file in the Name Service Switch NSS of the GNU C Library allows a local attacker to exploit a specially crafted NSS file database to...

CVE-2015-5277

The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...

Heap overflow

The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...

CVE-2015-5277

The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...

CVE-2015-5277

The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...

UBUNTU-CVE-2015-5277

The getcontents function in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 before 2.20 might allow local users to cause a denial of service heap corruption or gain privileges via a long line in the NSS files database...

glibc: Stack-overflow in glibc swscanf

A stack overflow flaw was found in glibc's swscanf function. An attacker able to make an application call the swscanf function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application...

glibc: heap buffer overflow in glibc swscanf

A heap-based buffer overflow flaw was found in glibc's swscanf function. An attacker able to make an application call the swscanf function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application...

PT-2017-2244 · Gnu +3 · Glibc +3

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.20 Description: The issue is related to the nscd daemon in the GNU C Library, where it does not correctly compute the size of an internal buffer when processing netgroup requests. This could lead to a crash of the ns...

PT-2015-7848 · Gnu +2 · Gnu C Library +2

Name of the Vulnerable Software and Affected Versions: GNU C Library versions prior to 2.22 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, by providing a malformed pattern that triggers an out-of-bounds read in the fnmatc...

[SECURITY] Fedora 23 Update: glibc-2.22-6.fc23

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

glibc: data corruption while reading the NSS files database

It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or corrupt the heap depending on adjacent heap contents. A local attacker could potentially use this flaw to execute arbitrary code on the system...

glibc: getaddrinfo() writes DNS queries to random file descriptors under high load

It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in information disclosure or data loss due to the application...

[SECURITY] Fedora 23 Update: libsedml-0.3.1-4.fc23

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

GNU glibc 'LD_POINTER_GUARD' Elevation of Privilege Vulnerability

GNU glibc is an open source, free C compiler released under the LGPL license. A security vulnerability exists in GNU glibc 'LDPOINTERGUARD' which allows local attackers to exploit the vulnerability to elevate privileges...

Gentoo Security Advisory GLSA 201503-04

Gentoo Linux Local Security Checks GLSA 201503-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201312-01

Gentoo Linux Local Security Checks GLSA 201312-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...