glibc, nscd security update

CentOS Errata and Security Advisory CESA-2020:3861 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS 7 : glibc (RHSA-2020:3861)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3861 advisory. - On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution aft...

CVE-2020-10029 affecting package glibc 2.28-24

CVE-2020-10029 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2019-9169 affecting package glibc 2.28-24

CVE-2019-9169 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2016-10739 affecting package glibc 2.28-24

CVE-2016-10739 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2018-20796 affecting package glibc 2.28-24

CVE-2018-20796 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-6096 affecting package glibc 2.28-24

CVE-2020-6096 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2018-19591 affecting package glibc 2.28-24

CVE-2018-19591 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-1751 affecting package glibc 2.28-24

CVE-2020-1751 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-1752 affecting package glibc 2.28-24

CVE-2020-1752 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2019-6488 affecting package glibc 2.28-24

CVE-2019-6488 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-1999-0199

manual/search.texi in the GNU C Library aka glibc before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999...

CVE-1999-0199

manual/search.texi in the GNU C Library aka glibc before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999...

CVE-1999-0199

CVE-1999-0199 affects glibc prior to 2.2. The issue is a missing statement about the unspecified tdelete return value when deleting a tree’s root, which could let an attacker access a dangling pointer in affected applications. Affected: glibc before 2.2. Remediation: upgrade to a version with the...

CVE-1999-0199

manual/search.texi in the GNU C Library aka glibc before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999...

glibc security, bug fix, and enhancement update

2.17-317.0.1 - Merge RH el7 u8 patches with Oracle patches Review-exception: Simple merge - Adding Mike Fabians C.utf-8 patch C.utf-8 is a unicode-aware version of the C locale Orabug 29784239. Reviewed-by: Jose E. Marchesi - Remove glibc-ora28641867.patch as duplicate of glibc-rh1705899-4.patch ...

Arbitrary Code Execution

glibc is vulnerable to arbitary code execution.It is possible because LDPREFERMAP32BITEXEC doe not ignore in setuid binaries...

RHEL 7 : glibc (RHSA-2020:3861)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3861 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache...

Low: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the software is 32-bit...