GNU C Library 'xdr_bytes' and 'xdr_string' Function Denial of Service Vulnerability

The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A denial of service vulnerability exists in the 'xdrbytes' and 'xdrstring' functions in GNU C Library version 2.25, which stems from the program failing to properly handle buffer...

CVE-2017-8804

The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...

CVE-2017-8804

The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...

CVE-2017-8804

The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...

CVE-2017-8804

CVE-2017-8804 affects glibc (libc6) 2.25 and permits denial of service via crafted UDP packets to port 111 due to mishandled failures in xdr_bytes/xdr_string during buffer deserialization. It is related to CVE-2017-8779 (RPC/BIND) which in other sources is described as a memory-exhaustion vulnera...

EulerOS 2.0 SP1 : glibc (EulerOS-SA-2016-1073)

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack overflow vulnerability was found in nssdnsgetnetbynamer.On systems with nsswitch configured to include 'networks: dns' with a privileged or...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The CVE-2017-8305 entry concerns UDFclient’s custom strlcpy implementation, which has a buffer overflow in versions before 0.8.8. The vulnerability affects UDFclient where the built-in strlcpy is used only on systems whose C library (e.g., glibc) lacks strlcpy. Upgrade to 0.8.8 or later to mitiga...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

Important Photon OS Security Update - PHSA-2017-0037

Updates of 'glibc' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0013

An update of cracklib,libevent,libgcrypt,httpd,glibc packages for PhotonOS has been released...

The vulnerability of the library that handles system calls and core functions of glibc allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the strxfrm function in the library, which handles system calls and core glibc functions, is due to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a long string...

F5 Networks BIG-IP : glibc vulnerability (K55001100)

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash. CVE-2015-5180 Impact For this vulnerability, an attacker must have local access to the system and know how to make the glibc function trigger an exploit. The...

Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20170321)

Security Fixes : - A stack overflow vulnerability was found in nan functions that could cause applications, which process long strings with the nan function, to crash or, potentially, execute arbitrary code. CVE-2014-9761 - It was found that out-of-range time values passed to the strftime functio...

OracleVM 3.3 / 3.4 : glibc (OVMSA-2017-0051)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update newmode size to fix a possible corruption - Fix AFINET6 getaddrinfo with nscd 1416496 - Update tests for struct sockaddrstorage changes 1338673 - Use FLCLOEXEC in internal calls to fopen 101234...

Oracle Linux 6 : glibc (ELSA-2017-0680)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0680 advisory. - Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function 1358015. - Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreater...

Updated glibc packages fix security vulnerability

Florian Weimer discovered a NULL pointer dereference in the DNS resolver of the GNU C Library. An attacker could use this to cause a denial of service CVE-2015-5180. Tim Ruehsen discovered that the getaddrinfo implementation in the GNU C Library did not properly track memory allocations. An...