40 matches found
PT-2020-9617
Name of the Vulnerable Software and Affected Versions newlib libc library versions prior to 3.3.0 Description The issue arises in the d2b function of the newlib libc library, where Balloc is used to allocate a big integer without verifying if the allocation was successful. This can lead to a null...
CVE-2016-6559
CVE-2016-6559 concerns the BSD libc function link_ntoa() in linkaddr.c, where the obuf bounds are mishandled. The root cause is improper bounds checking, which could allow memory read/write. Public analyses from FreeBSD indicate it is unlikely that applications expose an exploitable use of link_n...
OpenSSH < 6.6 SFTP (x64) - Command Execution Exploit
Exploit for linux platform in category remote exploits define GNUSOURCE // THIS PROGRAM IS NOT DESIGNED TO BE SAFE AGAINST VICTIM MACHINES THAT // TRY TO ATTACK BACK, THE CODE IS SLOPPY! // In other words, please don't use this against other people's machines. include include include include...
GNU glibc Local Elevation of Privilege Vulnerability
GNU glibc a.k.a. GNU C Library, libc6 is an open-source, free C compiler released under the LGPL license. A local elevation of privilege vulnerability exists in GNU glibc. A local attacker can exploit this vulnerability to gain elevated privileges...
BlueBorne RCE on Android 6.0.1 (CVE-2017-0781)
A few days ago, the company Armis published a proof of concept PoC of a remote code execution vulnerability in Android via Bluetooth CVE-2017-0781, known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC uses only 2 of them to achieve its goal. The exploitation proce...
PT-2018-4957
Name of the Vulnerable Software and Affected Versions BSD libc library affected versions not specified Description The issue is related to improper bounds checking of the obuf variable in the link ntoa function, which may allow an attacker to read or write from memory. The impact and severity...
PT-2016-2371
Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Description The issue is related to insufficient access control in the libc library of the Android operating system. It can be exploited by a remote attacker using a specially crafted file, potentially causing a...
The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.
The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...
Unspecified Vulnerability in Solaris Libc Library Component
Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris Libc Library component could allow an attacker to launch a denial-of-service attack or unauthorized modification of some data...
PT-2016-1071
Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris 11 Description The issue is related to errors in the code of the Libc Library component of the Solaris operating system. It may allow a local attacker to modify, add, or delete data, or cause a partial denial of service. The...
PT-2015-4592
Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects the availability of the system. It is related to the Libc library. Recommendations For Oracle Sun Solaris version 11, at the moment, there is no information about a newer version that...
DNS Reverse Lookup Shellshock
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory DNS Reverse Lookup as a vector for the Bash vulnerability CVE-2014-6271 et.al. CVE-2014-3671 references: CVE-2014-6271, CVE-2014-7169, CVE-2014-6277, CVE-2014-6278 CVE-2014-7186 and, CVE-2014-7187 Summary: Above CVEs detail a number ...
GLSA-200806-05 : cbrPager: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200806-05 cbrPager: User-assisted execution of arbitrary code Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use...
AIX FTPd libc Library Remote Overflow
Binary data 1827.prm...
DEBIAN-CVE-2003-0028
Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...
FreeBSD-SA-01:40.fts
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:40 Security Advisory FreeBSD, Inc. Topic: fts3 routines contain race condition REVISED Category: core Module: libc Announced: 2001-06-04 Revised: 2001-08-16 Credits: Nick...
CVE-1999-0789
Buffer overflow in AIX ftpd in the libc library...
CVE-1999-0789
CVE-1999-0789 concerns a buffer overflow in the AIX ftpd (FTP daemon) within the libc library. Connected sources describe the root cause as a buffer overflow in the libc used by AIX FTPd, with offshoots noting a remote overflow that could crash the FTP server and, in some reports, allow the remot...
