Lucene search
+L

465 matches found

Tenable Nessus
Tenable Nessus
•added 2019/12/04 12:00 a.m.•21 views

EulerOS 2.0 SP2 : gettext (EulerOS-SA-2019-2505)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/03 12:00 a.m.•39 views

EulerOS Virtualization for ARM 64 3.0.3.0 : gettext (EulerOS-SA-2019-2320)

According to the version of the gettext packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to...

9.8CVSS6.8AI score0.04257EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2019/11/14 12:00 a.m.•42 views

gettext security update

0.19.8.1-17 - Ported CI gating tests to Python 3.6 0.19.8.1-16 - add CI gating tests 0.19.8.1-15 - fix CVE-2018-18751: double-free in xgettext rhbz1647049...

9.8CVSS1.2AI score0.04257EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2019/11/08 12:00 a.m.•28 views

EulerOS 2.0 SP3 : gettext (EulerOS-SA-2019-2270)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Veracode
Veracode
•added 2019/11/06 12:21 a.m.•29 views

Arbitrary Code Execution

gettext is vulnerable to arbitrary code execution. A double free bug in the function defaultaddmessage in read-catalog.c could potentially allow an attacker to execute arbitrary code in the system...

9.8CVSS5.3AI score0.04257EPSS
SaveExploits1References10Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/11/06 12:00 a.m.•57 views

RHEL 8 : gettext (RHSA-2019:3643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3643 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2019/11/05 9:25 p.m.•84 views

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.6AI score0.04257EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2019/11/05 9:25 p.m.•27 views

gettext: double free in default_add_message in read-catalog.c

An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...

9.8CVSS7.4AI score0.04257EPSS
SaveExploits1References4
OSV
OSV
•added 2019/11/05 6:10 p.m.•32 views

RLSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

4CVSS7.3AI score0.04257EPSS
SaveExploits1References2
OSV
OSV
•added 2019/11/05 6:10 p.m.•22 views

ALSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS7.3AI score0.04257EPSS
SaveExploits1References2
Rockylinux
Rockylinux
•added 2019/11/05 6:10 p.m.•38 views

gettext security update

An update is available for gettext. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gettext packages provide a documentation for producing multi-lingual...

9.8CVSS9.2AI score0.04257EPSS
SaveExploits1
AlmaLinux
AlmaLinux
•added 2019/11/05 6:10 p.m.•42 views

Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS0.9AI score0.04257EPSS
SaveExploits1References2
OSV
OSV
•added 2019/11/04 9:15 p.m.•16 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.7AI score
SaveExploits0References13
NVD
NVD
•added 2019/11/04 9:15 p.m.•14 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.8AI score0.06711EPSS
SaveExploits1References7
OSV
OSV
•added 2019/11/04 9:15 p.m.•7 views

DEBIAN-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2019/11/04 9:15 p.m.•33 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References3
OSV
OSV
•added 2019/11/04 9:15 p.m.•13 views

UBUNTU-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7AI score0.06711EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2019/11/04 8:27 p.m.•58 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS6.9AI score0.06711EPSS
SaveExploits1
CVE
CVE
•added 2019/11/04 8:27 p.m.•122 views

CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

9.8CVSS9.5AI score0.06711EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2019/11/04 8:27 p.m.•49 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.7AI score0.06711EPSS
SaveExploits1References7
Rows per page
Query Builder