CVE-2016-8859

Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...

GLSA-201701-11 : musl: Integer overflow

The remote host is affected by the vulnerability described in GLSA-201701-11 musl: Integer overflow A vulnerability was discovered in musls tretnfarunparallel function buffer overflow logic, due to the incorrect use of integer types and missing overflow checks. Impact : An attacker, who controls...

musl: Integer overflow

Background musl is a “libc”, an implementation of the standard library functionality described in the ISO C and POSIX standards, plus common extensions, intended for use on Linux-based systems. Description A vulnerability was discovered in musl’s tretnfarunparallel function buffer overflow logic,...

PT-2017-9847 · None +3 · Musl Libc +4

Name of the Vulnerable Software and Affected Versions: TRE library versions affected versions not specified musl libc versions affected versions not specified Description: The issue is related to multiple integer overflows in the TRE library and musl libc, which can be exploited by attackers to...

musl libc 'tre_tnfa_run_parallel()' function integer overflow vulnerability

musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. An integer overflow vulnerability exists in the musl libc 'tretnfarunparallel' function. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A...

Fedora 23 : webkitgtk4-2.10.9-1.fc23 (2016-7eb48a78dc)

This update together with the previous release brings the following fixes Security fixes: CVE-2016-1726 Limit the number of tiles according to the visible area. This was causing a huge memory consumption with some websites. Fix rendering of form controls and scrollbars with GTK+ = 3.19. Fix HTTP...

musl libc 'inet_pton.c' stack buffer overflow vulnerability

musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. A stack buffer overflow vulnerability exists in musl libc, which could be exploited by a remote attacker to cause a denial-of-service attack by crashing an application that links to this library...

musl: arbitrary code execution

A stack-based buffer overflow has been found in musl libc's ipv6 address literal parsing code. Programs which call the inetpton or getaddrinfo function with AFINET6 or AFUNSPEC and untrusted address strings are affected. Successful exploitation yields control of the return address. Having enabled...

MGASA-2014-0262 Updated musl package fixes CVE-2014-3484

Updated musl package fixes security vulnerability: A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo,...

Updated musl package fixes CVE-2014-3484

Updated musl package fixes security vulnerability: A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo,...

[musl] Security advisory for musl libc - remote stack-based buffer overflow in DNS response parsing [CVE-2014-3484]

A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc. if one of the...

musl-libc buffer overflow

Buffer overflow on DNS response parsing...

musl "fmt_fp()"单字节溢出漏洞

Musl是一个轻量级的C标准库。 Musl "fmtfp"函数src/stdio/vfprintf.c存在单字节溢出错误，允许攻击者利用漏洞使链接此库的应用崩溃。 0 musl 0.x Musl 1.0.0已经修复该漏洞，建议用户下载更新： http://www.musl-libc.org...

CVE-2012-2114

Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr...

Stack overflow

Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr...

CVE-2012-2114

Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string to an unbuffered stream such as stderr...

CVE-2012-2114

CVE-2012-2114: A stack-based overflow in musl’s fprintf (before 0.8.8) can be triggered by a long string to an unbuffered stream (e.g., stderr), allowing a crash or possibly arbitrary code execution. Affected: musl libc versions before 0.8.8. Mitigation: upgrade to 0.8.8 or later; apply official ...