GLSA-201503-04 : GNU C Library: Multiple vulnerabilities (GHOST)

The remote host is affected by the vulnerability described in GLSA-201503-04 GNU C Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers referenced below for details. Impact : A local attacker may be able to execute...

[SECURITY] [DSA 3169-1] eglibc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-3169-1 [email protected] http://www.debian.org/security/ Aurelien Jarno February 23, 2015 http://www.debian.org/security/faq -...

GNU glibc multiple security vulnerabilities

Restrictions bypass, code execution, use-after-free, DoS...

SUSE-SU-2015:0526-1 Security update for glibc

glibc has been updated to fix four security issues. These security issues were fixed: - CVE-2014-7817: The wordexp function in GNU C Library aka glibc 2.21 did not enforce the WRDENOCMD flag, which allowed context-dependent attackers to execute arbitrary commands, as demonstrated by input...

RedHat Update for glibc RHSA-2015:0327-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : glibc (SAT Patch Number 10357)

glibc has ben updated to fix three security issues : - wordexp failed to honour WRDENOCMD bsc906371. CVE-2014-7817 - Fixed invalid file descriptor reuse while sending DNS query bsc915526. CVE-2013-7423 - Fixed buffer overflow in wscanf bsc916222 These non-security issues have been fixed:...

glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)

An out-of-bounds read flaw was found in the way glibc's iconv function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv function with a specially crafted argument could use this flaw to crash that application...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora 20 : glibc-2.18-19.fc20 (2015-2845)

Fix CVE-2014-6040: crash in code page decoding functions IBM933, IBM935, IBM937, IBM939, IBM1364 - Fix CVE-2014-7817: command execution in wordexp with WRDENOCMD specified Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

RHEL 7 : glibc (RHSA-2015:0327)

Updated glibc packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora Update for glibc FEDORA-2015-2837

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : glibc-2.20-8.fc21 (2015-2837)

Fix CVE-2014-7817 glibc: command execution in wordexp with WRDENOCMD specified - Fix CVE-2014-9402 glibc: denial of service in getnetbyname function - CVE-2015-1472 glibc: heap buffer overflow in glibc swscanf - Fix segfault when LDLIBRARYPATH is set to non-existent directory. Note that Tenable...

Fedora Update for glibc FEDORA-2015-2845

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : php-5.5.22-1.fc20 (2015-2328)

19 Feb 2015, PHP 5.5.22 Core : - Fixed bug 67068 getClosure returns somethings that's not a closure. Danack at basereality dot com - Fixed bug 68925 Mitigation for CVE-2015-0235 ' GHOST: glibc gethostbyname buffer overflow. Stas - Fixed bug 68942 Use after free vulnerability in unserialize with...

[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 20 Update: glibc-2.18-19.fc20

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Cisco IOS XE GNU C Library (glibc) Buffer Overflow (CSCus69732) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. This allows a...

Cisco IOS XE GNU GNU C Library (glibc) Buffer Overflow (CSCus69731) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

GNU glibc 'fnmatch_loop.c' remote buffer overflow vulnerability

GNU glibc is an implementation of the C library for the Linux operating system. A remote buffer overflow vulnerability exists in GNU glibc 'fnmatchloop.c', which can be exploited by an attacker to execute arbitrary code or launch a denial of service attack in the context of an affected applicatio...

GNU glibc 'getaddrinfo.c' Remote Code Execution Vulnerability

GNU glibc is an implementation of the C library for the Linux operating system. A remote code execution vulnerability exists in GNU glibc 'getaddrinfo.c', which can be exploited by an attacker to execute arbitrary code in an affected application...