CVE-2015-3796

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3797 and...

CVE-2015-3798

CVE-2015-3798 concerns the TRE library in Libc used by Apple iOS (before 8.4.1) and OS X (before 10.10.5). The vulnerability allows context-dependent attackers to cause memory corruption, potentially executing arbitrary code or causing an application crash via a crafted regular expression. The de...

CVE-2015-3798

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...

CVE-2015-3796

CVE-2015-3796 affects the TRE library used by Apple’s iOS and macOS. A crafted regular expression can trigger a memory corruption in TRE, leading to arbitrary code execution or a denial of service (memory corruption and application crash). The description specifies affected versions: iOS prior to...

CVE-2015-3796: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3797 and...

CVE-2015-3797: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...

CVE-2015-3798: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data appleios841check.nbin...

musl libc 'inet_pton.c' stack buffer overflow vulnerability

musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. A stack buffer overflow vulnerability exists in musl libc, which could be exploited by a remote attacker to cause a denial-of-service attack by crashing an application that links to this library...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The Debian GNU/Linux operating system’s libc-client-dev package contains multiple vulnerabilities that, if exploited, may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libc-client2002edebian package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2015:0863 Updated glibc packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Return-into-libc attack and Defense-bug warning-the black bar safety net

This article first analyzes the return-into-libc attack principle, were introduced in different platforms for the traditional return-into-libc attack of the experimental process and results. Then, this paper further introduces and explains the return-oriented programming attacks, this attack can...

PRNG weakness allows for DNS poisoning on Android — Mozilla

Mozilla developer Daniel Stenberg reported that the DNS resolver in Firefox for Android uses an insufficiently random algorithm when generating random numbers for the unique identifier. This was derived from an old version of the Bionic libc library and suffered from insufficient randomness in th...

musl: arbitrary code execution

A stack-based buffer overflow has been found in musl libc's ipv6 address literal parsing code. Programs which call the inetpton or getaddrinfo function with AFINET6 or AFUNSPEC and untrusted address strings are affected. Successful exploitation yields control of the return address. Having enabled...

Mandriva Linux Security Advisory : sudo (MDVSA-2015:126)

Updated sudo packages fix security vulnerability : Prior to sudo 1.8.12, the TZ environment variable was passed through unchecked. Most libc tzset implementations support passing an absolute pathname in the time zone to point to an arbitrary, user-controlled file. This may be used to exploit bugs...

Internet Bug Bounty: Heap overflow in H. Spencer’s regex library on 32 bit systems

The IBB's programs provide a great incentive for me to find vulnerabilities in open source software. With this one I set out to find a vulnerability in PHP and discovered that the vulnerability that I found exists in a wider constellation of applications, including BSD libc's. IBB's Alex Rice's...

Python-2.4.2-realpath()

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath...