Lucene search
+L

40 matches found

CNVD
CNVD
•added 2020/12/07 12:00 a.m.•10 views

GNU C Library Assertion Failure Vulnerability

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. An assertion failure vulnerability exists in the iconv function in GNU C Library versions 2.30 through 2.32. An attacker can exploit this vulnerability to cause a denial of service via UC...

4.8CVSS6.3AI score0.01531EPSS
SaveExploits1References1
OSV
OSV
•added 2020/12/04 7:15 a.m.•49 views

CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

4.8CVSS6.7AI score
SaveExploits0References5
OSV
OSV
•added 2020/12/04 7:15 a.m.•14 views

UBUNTU-CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

4.8CVSS6.8AI score0.01531EPSS
SaveExploits1References4
Mend
Mend
•added 2020/12/04 6:48 a.m.•1 views

CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

5.9CVSS0.01531EPSS
SaveExploits1References9
Debian CVE
Debian CVE
•added 2020/12/04 6:48 a.m.•62 views

CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

4.8CVSS6.4AI score0.01531EPSS
SaveExploits1
CNNVD
CNNVD
•added 2020/12/04 12:00 a.m.•19 views

GNU C Library 安全漏洞

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. An assertion failure vulnerability exists in the iconv function in GNU C Library versions 2.30 through 2.32. An attacker can exploit this vulnerability to cause a denial of service via UC...

4.8CVSS6.7AI score0.01531EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2020/12/04 12:00 a.m.•5 views

PT-2020-17190

Name of the Vulnerable Software and Affected Versions GNU C Library aka glibc or libc6 versions 2.30 through 2.32 Description The iconv function in the GNU C Library, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program,...

4.8CVSS0.01531EPSS
SaveExploits1References89
RedhatCVE
RedhatCVE
•added 2017/08/07 2:48 p.m.•27 views

CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS4.4AI score0.01453EPSS
SaveExploits0References1
NVD
NVD
•added 2017/07/31 1:29 p.m.•21 views

CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS5.5AI score0.01453EPSS
SaveExploits0References1
OSV
OSV
•added 2017/07/31 1:29 p.m.•5 views

ALPINE-CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS6.7AI score0.01453EPSS
SaveExploits0References1
OSV
OSV
•added 2017/07/31 1:29 p.m.•7 views

DEBIAN-CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS6.7AI score0.01453EPSS
SaveExploits0References1
OSV
OSV
•added 2017/07/31 1:29 p.m.•19 views

CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS6.5AI score
SaveExploits0References1
Prion
Prion
•added 2017/07/31 1:29 p.m.•14 views

Null pointer dereference

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

4.3CVSS5.5AI score0.01453EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2017/07/31 1:00 p.m.•92 views

CVE-2017-11550

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS6.1AI score0.01453EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/31 12:00 a.m.•6 views

CVE-2017-11550: NULL Pointer Dereference

The id3ucs4length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service NULL Pointer Dereference and application crash via a crafted mp3 file...

5.5CVSS5.8AI score0.01453EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•12 views

The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code

Mozilla Firefox ESR contains a vulnerability related to errors in the implementation of the cairotruetypeindextoucs4 function in the Cairo library. Exploiting this vulnerability allows malicious individuals to execute arbitrary code remotely, using a specially crafted extension that processes fon...

7.6CVSS7.6AI score0.0503EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2015/08/12 2:59 p.m.•27 views

Out-of-bounds

The stringpreputf8toucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read...

7.5CVSS6.9AI score0.03185EPSS
SaveExploits0References10Affected Software3
Positive Technologies
Positive Technologies
•added 2015/08/12 12:00 a.m.•6 views

PT-2015-5574

Name of the Vulnerable Software and Affected Versions libin versions prior to 1.31 jabberd2 affected versions not specified Description The issue allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which...

7.5CVSS0.03878EPSS
SaveExploits0References50
attackerkb
attackerkb
•added 2014/03/19 10:55 a.m.•10 views

CVE-2014-1509

Buffer overflow in the cairotruetypeindextoucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF docume...

8.8CVSS8.2AI score0.0503EPSS
SaveExploits1References13
RedHat Linux
RedHat Linux
•added 2014/03/18 8:34 p.m.•9 views

Mozilla: Memory corruption in Cairo during PDF font rendering (MFSA 2014-27)

Buffer overflow in the cairotruetypeindextoucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF docume...

8.8CVSS7.4AI score0.0503EPSS
SaveExploits1References5
Rows per page
Query Builder