CVE-2024-32878 Use of Uninitialized Variable Vulnerability in llama.cpp

Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in ggufinitfromfile, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructed, it may be possible to control this...

Mageia: Security Advisory (MGASA-2024-0145)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0147 Updated glibc packages fix security vulnerability

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. CVE-2024-2961...

MGASA-2024-0145 Updated editorconfig-core-c packages fix security vulnerability

pointer overflow in STRINGCAT and a few more stack buffer overflows...

Updated glibc packages fix security vulnerability

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. CVE-2024-2961...

Updated editorconfig-core-c packages fix security vulnerability

pointer overflow in STRINGCAT and a few more stack buffer overflows...

[SECURITY] Fedora 38 Update: libfilezilla-0.47.0-1.fc38

libfilezilla is a small and modern C++ library, offering some basic functionality to build high-performing, platform-independent programs...

ROS-20240425-07

A vulnerability in the Git distributed version control system is related to the ability to create the folder "C:.git." Exploitation of the vulnerability could allow an attacker to run arbitrary commands...

The vulnerability of the `open_get_offered_capabilities()` function in the C language library for interacting with Azure uAMQP allows a attacker to execute arbitrary code.

The vulnerability of the opengetofferedcapabilities function in the C language library for interacting with Azure uAMQP services is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

[SECURITY] Fedora 40 Update: abseil-cpp-20240116.2-1.fc40

Abseil is an open-source collection of C++ library code designed to augment the C++ standard library. The Abseil library code is collected from Google's own C++ code base, has been extensively tested and used in production, and is the same code we depend on in our daily coding lives. In some case...

glibc 安全漏洞

glibc GNU C Library is the C standard library implemented by the GNU Project. A security vulnerability exists in glibc, which stems from an attempt by addgetnetgrentX to send a non-existent response after a cache insertion failure, which may result in a null pointer dereference that could cause t...

[SECURITY] Fedora 40 Update: libfilezilla-0.47.0-1.fc40

libfilezilla is a small and modern C++ library, offering some basic functionality to build high-performing, platform-independent programs...

[SECURITY] [DSA 5673-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5673-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 23, 2024 https://www.debian.org/security/faq -...

[SECURITY] Fedora 39 Update: cjson-1.7.17-1.fc39

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...

[SECURITY] Fedora 40 Update: cjson-1.7.17-1.fc40

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...

The vulnerability of the iconv() function in the system library glibc, which allows a hacker to execute arbitrary code

The vulnerability of the iconv function in the glibc system library is related to the possibility of writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by introducing a specially crafted PHP file...

GNU C Library Buffer Overflow Vulnerability

GNU C Library is an open source, free C compiler released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that originates from a boundary error in the iconv function when handling untrusted input. An attacker could exploit the vulnerability to cause the...

[SECURITY] Fedora 38 Update: glibc-2.37-19.fc38

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 38 Update: llhttp-9.2.1-1.fc38

This project is a port of httpparser to TypeScript. llparse is used to generate the output C source file, which could be compiled and linked with the embedder's program like Node.js...

[SECURITY] Fedora 39 Update: llhttp-9.2.1-1.fc39

This project is a port of httpparser to TypeScript. llparse is used to generate the output C source file, which could be compiled and linked with the embedder's program like Node.js...