ROS-20220112-02

Vulnerability of wordexp function of the library that provides system calls and basic glibc functions is caused by an integer overflow. Exploitation of the vulnerability could allow an attacker to read arbitrary files...

CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

CVE-2021-3998

A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

GHSA-76W9-P8MG-J927 Out-of-bounds Write in nix

On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption. The libc getgrouplist functi...

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2021-2881)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2881)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2820)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : glibc (EulerOS-SA-2021-2820)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The wordexp function in the GNU C Library aka glibc through 2.33 may crash or read arbitrary memory in parseparam in posix/wordexp...

OPENSUSE-SU-2021:1560-1 Security update for glibc

This update for glibc fixes the following issues: - libio: do not attempt to free wide buffers of legacy streams bsc1183085 - CVE-2016-10228: Rewrite iconv option parsing to fix security issue bsc1027496 This update was imported from the SUSE:SLE-15:Update update project...

Security update for glibc (moderate)

openSUSE Security Update: Security update for glibc Announcement ID: openSUSE-SU-2021:1560-1 Rating: moderate References: 1027496 1183085 Cross-References: CVE-2016-10228 CVSS scores: CVE-2016-10228 NVD : 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2016-10228 SUSE: 3.3...

SUSE-SU-2021:3291-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use pthreadattrcopy in mqnotify bsc1186489. - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number bsc1187911...

OPENSUSE-SU-2021:3291-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use pthreadattrcopy in mqnotify bsc1186489. - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number bsc1187911...

The vulnerability of the parse_reg_exp function in the glibc library, which allows a hacker to cause a service failure

The vulnerability of the parseregexp function in the glibc library is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Fedora: Security Advisory for kernel-headers (FEDORA-2021-c09b851eb0)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for kernel-headers (FEDORA-2021-eab8c5a263)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:3830-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2021:3830-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3830-1 advisory. - libio: do not attempt to free wide buffers of legacy streams bsc1183085 - CVE-2016-10228: Rewrite iconv option parsing to fix security issue...

Updated glibc packages fixes security related bugs

This update fixes a few security related bugs: - regex: fix buffer read overrun in search BZ 28470 - nptl: Do not set signal mask on second setjmp return BZ 28607...

MGASA-2021-0526 Updated glibc packages fixes security related bugs

This update fixes a few security related bugs: - regex: fix buffer read overrun in search BZ 28470 - nptl: Do not set signal mask on second setjmp return BZ 28607...

SUSE-SU-2021:3830-1 Security update for glibc

This update for glibc fixes the following issues: - libio: do not attempt to free wide buffers of legacy streams bsc1183085 - CVE-2016-10228: Rewrite iconv option parsing to fix security issue bsc1027496...