Buffer Overflow

glibc is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption when the size of the buffer is exactly 1 which allows an attacker to control the input buffer and size passed to getcwd in a setuid program...

SUSE SLES12 Security Update : glibc (SUSE-SU-2022:1123-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1123-1 advisory. - A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directo...

SUSE: Security Advisory (SUSE-SU-2022:1123-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: glibc

Issue Overview: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's svcunix.c module of the GNU C Library aka glibc through 2.34. This vulnerability copies its path argument onto the stack without validating its length, whic...

Medium: glibc

Issue Overview: A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's svcunix.c module of the GNU C Library aka glibc through 2.34. This vulnerability copies its path argument onto the stack without validating its length, whic...

SUSE-SU-2022:1123-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2020-1752: Fix use-after-free in glob when expanding user bsc1167631...

Amazon Linux AMI : glibc (ALAS-2022-1576)

The version of glibc installed on the remote host is prior to 2.17-324.189. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1576 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the...

Amazon Linux 2 : glibc (ALAS-2022-1767)

The version of glibc installed on the remote host is prior to 2.26-58. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1767 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's...

CLSA-2022-1648138064 Fixed CVE-2021-3999 in glibc

CVE-2021-3999: fix single byte buffer overflow and overflow in getcwd...

ROS-20220323-02

A vulnerability in the glibc system library is related to a boundary error in the clntcreate function in module sunrpc module. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted input data to an application using a vulnerable version of the library...

SUSE: Security Advisory (SUSE-SU-2022:0909-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : glibc (SUSE-SU-2022:14923-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14923-1 advisory. - Integer overflow in the strxfrm function in the GNU C Library aka glibc or libc6 before 2.21 allows context-dependent attackers to cause a...

SUSE SLES12 Security Update : glibc (SUSE-SU-2022:0909-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0909-1 advisory. - A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of t...

SUSE: Security Advisory (SUSE-SU-2022:14923-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0909-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 - CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 bsc1194640...

SUSE-SU-2022:14923-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768, BZ 22542 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770, BZ 28768 - CVE-2021-3999: Fixed in getcwd to set errno to ERANGE for size == 1...

glibc security update

...

Oracle Linux 8 : glibc (ELSA-2022-9234)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9234 advisory. - A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly...

Oracle Linux 8 : glibc (ELSA-2022-0896)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0896 advisory. - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak 2032280 - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc...

glibc security update

2.28-164.0.5.3 - Merge external errata patches. - Siddhesh Poyarekar - 2.28-164.3 - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak 2032280 - Siddhesh Poyarekar - 2.28-164.2 - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clntcreate for 'unix' and...