RHEL 8 : glibc (RHSA-2020:4444)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4444 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

CVE-2020-27618

A flaw was found in glibc. If an attacker provides the iconv function with invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encodings, it fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service...

Amazon Linux 2 : glibc (ALAS-2020-1517)

The version of glibc installed on the remote host is prior to 2.26-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1517 advisory. In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IP...

Medium: glibc

Issue Overview: In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string,...

SUSE-SU-2020:3024-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2020-10029: Fixed a stack corruption from range reduction of pseudo-zero bsc1165784 - Use posixspawn on popen bsc1149332, bsc1176013 - Correct locking and cancellation cleanup in syslog functions bsc1172085 - Fixed concurrent changes on nscd...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20201001)

Security Fixes : - glibc: LDPREFERMAP32BITEXEC not ignored in setuid binaries CVE-2019-19126 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141743; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2020:3861 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS 7 : glibc (RHSA-2020:3861)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3861 advisory. - On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable during program execution aft...

CVE-2019-9169 affecting package glibc 2.28-24

CVE-2019-9169 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2016-10739 affecting package glibc 2.28-24

CVE-2016-10739 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2018-20796 affecting package glibc 2.28-24

CVE-2018-20796 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-10029 affecting package glibc 2.28-24

CVE-2020-10029 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-1751 affecting package glibc 2.28-24

CVE-2020-1751 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-6096 affecting package glibc 2.28-24

CVE-2020-6096 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2020-1752 affecting package glibc 2.28-24

CVE-2020-1752 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2018-19591 affecting package glibc 2.28-24

CVE-2018-19591 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-2019-6488 affecting package glibc 2.28-24

CVE-2019-6488 affecting package glibc 2.28-24. A patched version of the package is available...

CVE-1999-0199

manual/search.texi in the GNU C Library aka glibc before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999...

CVE-1999-0199

manual/search.texi in the GNU C Library aka glibc before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999...

CVE-1999-0199

CVE-1999-0199 affects glibc prior to 2.2. The issue is a missing statement about the unspecified tdelete return value when deleting a tree’s root, which could let an attacker access a dangling pointer in affected applications. Affected: glibc before 2.2. Remediation: upgrade to a version with the...