195 matches found
CVE-2026-6368
A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...
CVE-2026-6791
A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...
Linux Distros Unpatched Vulnerability : CVE-2026-6368
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which o...
glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion
A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...
glibc: glibc: Process abort due to invalid memory in wordexp
A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...
DEBIAN-CVE-2026-6368
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...
CVE-2026-6368
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...
DEBIAN-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6368
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...
UBUNTU-CVE-2026-6368
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...
UBUNTU-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
EUVD-2026-55729
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
CVE-2026-6791 concerns tilde expansion in wordexp within glibc. When expanding paths starting with ~username, parse_tilde extracts the username and allocates memory for it on the stack via strndupa. No bounds checks on the username length can exhaust stack space, enabling a stack-clash condition ...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6368
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...
CVE-2026-6368 wordexp with WRDE_APPEND can return or use invalid memory
Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...