SUSE SLED10 / SLES10 Security Update : glibc (SUSE-SU-2012:1488-1)

This collective update to the GNU Lib C library glibc provides the following fixes : - Make addmntent return errors also for cached streams bnc676178, CVE-2011-1089 - Fix overflows in vfprintf bnc770891, CVE-2012-3406 - Fix incomplete results from nscd bnc753756 - Fix a deadlock in dlsym in case...

SUSE SLES10 Security Update : glibc (SUSE-SU-2014:1119-1)

This glibc update fixes a critical privilege escalation problem and the following security and non security issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 -...

SUSE SLES11 Security Update : glibc (SUSE-SU-2015:0167-1)

glibc has been updated to fix a security issue and two bugs : Security issue fixed : - Copy filename argument in posixspawnfileactionsaddopen CVE-2014-4043 Bugs fixed : - don't touch user-controlled stdio locks in forked child bsc864081, GLIBC BZ 12847 - Fix infinite loop in checkpf bsc909053,...

SUSE SLES10 Security Update : glibc (SUSE-SU-2015:0170-1)

glibc has been updated to fix security issues : - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Fixed a stack overflow during hosts parsing CVE-2013-4357 - Copy filename argument in posixspawnfileactionsaddop...

SUSE SLED10 / SLES10 Security Update : glibc (SUSE-SU-2013:0858-1)

This collective update for the GNU C library glibc provides the following fixes : - Fix stack overflow in getaddrinfo with many results bnc813121, CVE-2013-1914 - Fix locking in IOcleanup bnc796982 - Fix buffer overflow in glob bnc691365 - Fix memory leak in execve bnc805899 Note that Tenable...

SUSE SLED10 / SLES10 Security Update : glibc (SUSE-SU-2012:1667-1)

This update for GNU C library glibc fixes multiple integer overflows in strtod and related functions. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:0526-1)

glibc has been updated to fix four security issues. These security issues were fixed : - CVE-2014-7817: The wordexp function in GNU C Library aka glibc 2.21 did not enforce the WRDENOCMD flag, which allowed context-dependent attackers to execute arbitrary commands, as demonstrated by input...

SUSE SLES11 Security Update : glibc (SUSE-SU-2013:1251-1)

This collective update for the GNU C library glibc provides the following fixes and enhancements : Security issues fixed : - Fix stack overflow in getaddrinfo with many results. bnc813121, CVE-2013-1914 - Fix a different stack overflow in getaddrinfo with many results. bnc828637 - Fix array...

SUSE SLES10 Security Update : glibc (SUSE-SU-2013:1287-1)

This collective update for the GNU C library glibc provides the following fixes and enhancements : Security issues fixed : - Fix stack overflow in getaddrinfo with many results. bnc813121, CVE-2013-1914 - Fixed another stack overflow in getaddrinfo with many results bnc828637 - Fix buffer overflo...

SUSE SLES11 Security Update : glibc (SUSE-SU-2014:1129-1)

This glibc update fixes a critical privilege escalation problem and two additional issues : - bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 - bnc836746: Avoid race...

Multiple buffer overflow vulnerabilities in GNU glibc

glibc is the libc library, or c runtime library, released by GNU. glibc is the lowest level api in the linux system, and almost any other runtime library will depend on glibc. A buffer overflow vulnerability exists in the gethostbynamer and other functions of GNU glibc. An attacker exploiting thi...

MGASA-2015-0195 Updated glibc packages fix security vulnerabilities

Updated glibc package fixes security vulnerabilities: It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in...

Updated glibc packages fix security vulnerabilities

Updated glibc package fixes security vulnerabilities: It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in...

GNU glibc security vulnerabilities

пgethostbynamer buffer overflow, getaddrinfo race conditions...

[ MDVSA-2015:218 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:218 http://www.mandriva.com/en/support/security/ Package : glibc Date : April 30, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Multiple vulnerabilities has been found and...

clamav: multiple issues

CVE-2015-2170 denial of service A flaw has been found in the UPX decoder with crafted files. During unpacking there are two range checks which are implemented "manually". Those checks lack the detection of overflows which are considered by the CLIISCONTAINED macro. - CVE-2015-2221 denial of...

Mandriva Linux Security Advisory : glibc (MDVSA-2015:218)

Multiple vulnerabilities has been found and corrected in glibc : It was discovered that, under certain circumstances, glibc's getaddrinfo\ function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resultin...

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the glibc-debuginfo-common-2.17 package in the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of Cisco ACS’s microprogramming software allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the glibc library of the OpenSUSE operating system can be exploited, and their exploitation may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...