SuSE 10 Security Update : libxml2 (ZYPP Patch Number 8235)

This update fixes libxml2 integer overflows. CVE-2012-2807 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid62003; scriptversion"1.6";...

Ubuntu: Security Advisory (USN-1546-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-3509

Multiple integer overflows in the 1 objallocalloc function in objalloc.c and 2 objallocalloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service crash via vectors related to the "addition of CHUNKHEADERSIZE to the length,"...

CVE-2012-3509

Multiple integer overflows in the 1 objallocalloc function in objalloc.c and 2 objallocalloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service crash via vectors related to the "addition of CHUNKHEADERSIZE to the length,"...

[slackware-security] glibc

New glibc packages are available for Slackware 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/glibc-2.13-i486-6slack13.37.txz: Rebuilt. Patched multiple integer overflows in the strtod, strtof, strtold, and strtodl...

Debian: Security Advisory (DSA-2487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libgc integer overflows

Multiple integer overflows in malloc / calloc implementations...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libgc vulnerability (USN-1546-1)

It was discovered that multiple integer overflows existed in the malloc and calloc implementations in the Boehm-Demers-Weiser garbage collecting memory allocator libgc. These could allow an attacker to cause a denial of service or possibly execute arbitrary code. Note that Tenable Network Securit...

USN-1546-1: libgc vulnerability

It was discovered that multiple integer overflows existed in the malloc and calloc implementations in the Boehm-Demers-Weiser garbage collecting memory allocator libgc. These could allow an attacker to cause a denial of service or possibly execute arbitrary code...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

DEBIAN-CVE-2012-3480

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

CVE-2012-3480

CVE-2012-3480 affects the GNU C Library (glibc/eglibc). Reports in connected documents describe multiple integer overflows in parser/conversion routines (strtod, strtof, strtold, strtod_l, and related functions) that can enable a local user to cause an application crash or possibly execute arbitr...

CVE-2012-3480

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

CVE-2012-3480

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

PT-2012-1186 · Gnu +3 · Gnu C Library +3

Name of the Vulnerable Software and Affected Versions: GNU C Library aka glibc or libc6 version 2.16 Description: The issue is caused by multiple integer overflows in various functions, including strtod, strtof, strtold, and strtod l, within the stdlib component of the GNU C Library. This can lea...

CVE-2012-3480

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

CVE-2012-2370

Multiple integer overflows in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 width in an XBM file, which triggers a heap-based buffer overflow...

CVE-2012-2370

Multiple integer overflows in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 width in an XBM file, which triggers a heap-based buffer overflow...