SUSE CVE-2024-45777

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the...

CVE-2024-45777

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...

GNU GRUB 缓冲区错误漏洞

GNU GRUB is a Linux system boot program from the GNU community. A buffer error vulnerability exists in GNU GRUB, which originates in the grub-core/gettext module, where the system does not properly limit the size of the data, and can be exploited by an attacker to run arbitrary code in the contex...

K000149538: GNU gettext vulnerability CVE-2018-18751

Security Advisory Description An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt. CVE-2018-18751 Impact There is no impact; F5 products are not...

CLSA-2024-1731599555 Fix CVE(s): CVE-2023-25815

SECURITY UPDATE: gettext machinery might get auto-initialized using an unintended locale directory - debian/patches/CVE-2023-25815.patch: avoid using gettext if the locale dir is not present - CVE-2023-25815...

USN-7023-1 git vulnerabilities

Maxime Escourbiac and Yassine Bengana discovered that Git incorrectly handled some gettext machinery. An attacker could possibly use this issue to allows the malicious placement of crafted messages. This issue was fixed in Ubuntu 16.04 LTS. CVE-2023-25815 It was discovered that Git incorrectly...

RHSA-2020:2846 Red Hat Security Advisory: gettext security update

Bulletin has no description...

RHSA-2020:2485 Red Hat Security Advisory: gettext security update

Bulletin has no description...

RHSA-2019:3643 Red Hat Security Advisory: gettext security update

Bulletin has no description...

RHSA-2020:1138 Red Hat Security Advisory: gettext security and bug fix update

Bulletin has no description...

node-gettext vulnerable to Prototype Pollution

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

GHSA-G974-HXVM-X689 node-gettext vulnerable to Prototype Pollution

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

A flaw was found in node-gettext. All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization. Mitigation Mitigation for this issue is either not available or the currently available options ...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

node-gettext 安全漏洞

node-gettext is a JavaScript implementation of gettext, a localization framework open-sourced by Alexander Wallin. A security vulnerability exists in node-gettext, which stems from improper cleaning of user input and may be contaminated by prototypes via the addTranslations function in gettext.js...

PT-2024-18942 · Unknown · Node-Gettext

Name of the Vulnerable Software and Affected Versions: node-gettext versions all Description: The issue is related to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization. This affects the node-gettext package. Recommendations: For all version...