[SECURITY] Fedora 27 Update: glibc-2.26-15.fc27

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Critical Photon OS Security Update - PHSA-2017-0080

Updates of 'libgcrypt', 'strongswan', 'libtar', 'unzip', 'glibc', 'openjdk' packages of Photon OS have been released...

CVE-2017-15804

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

Buffer overflow

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

CVE-2017-15804

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

CVE-2017-15804

CVE-2017-15804 affects the GNU C Library (glibc) glob() implementation: a buffer overflow occurs during unescaping of user names with the ~ operator in glob.c, in glibc versions before 2.27. Multiple connected advisories (e.g., ALAS2-2018-1048, CESA/CentOS notes) confirm the issue and list glibc ...

CVE-2017-15671

CVE-2017-15671 applies to the GNU C Library (glibc) glob implementation: when invoked with GLOB_TILDE, memory could fail to be freed during ~ expansion for very long usernames, potentially causing a denial of service via memory leak. Affected: glibc versions before 2.27. The connected documents d...

CVE-2017-15670

CVE-2017-15670 affects glibc (libc6) before 2.27. It is a heap-based buffer overflow in glob.c triggered by processing home directories with the ~ operator followed by a long string. Multiple connected documents confirm the vulnerability class and affected component. Remediation in the disclosed ...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

Design/Logic Flaw

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

CVE-2011-5320 affects the GNU C Library (glibc) where scanf and related input functions are vulnerable in versions prior to 2.15. A crafted large string of 0s can trigger a local denial of service (segmentation fault). The impact is limited to local attackers with access to the system and is not ...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

EulerOS 2.0 SP1 : glibc (EulerOS-SA-2017-1199)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow vulnerability was found in nan functions that could cause applications, which process long strings with the nan function, to cra...

EulerOS 2.0 SP2 : glibc (EulerOS-SA-2017-1200)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow vulnerability was found in nan functions that could cause applications, which process long strings with the nan function, to cra...

how2heap vulnerability technical research and analysis summary of-under-vulnerability warning-the black bar safety net

"how2heap"is shellphish team at Github on the open source stack flaws tutorial series. I this period of time non-stop in the refresher heap of flaws in the application of common sense,to see these applied skills in the future feel rewarding. This article is my training this tutorial series after ...

DEBIAN-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

Design/Logic Flaw

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...