38 matches found
CVE-2015-7547
Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...
glibc -- getaddrinfo stack-based buffer overflow
Fabio Olive Leite reports: A stack-based buffer overflow was found in libresolv when invoked from nssdns, allowing specially crafted DNS responses to seize control of EIP in the DNS client. The buffer overflow occurs in the functions senddg send datagram and sendvc send TCP for the NSS module...
CVE-2015-5776
Libinfo in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by leveraging use of an AFINET6 socket...
Memory corruption
Libinfo in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by leveraging use of an AFINET6 socket...
CVE-2015-5776
Libinfo in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash by leveraging use of an AFINET6 socket...
CVE-2015-5776
CVE-2015-5776 affects Libinfo in Apple iOS before 8.4.1 and macOS before 10.10.5. The vulnerability allows a remote attacker to cause memory corruption, leading to arbitrary code execution or a denial of service by abusing use of an AF_INET6 socket. The Apple listing confirms the Libinfo memory c...
musl: arbitrary code execution
A stack-based buffer overflow has been found in musl libc's ipv6 address literal parsing code. Programs which call the inetpton or getaddrinfo function with AFINET6 or AFUNSPEC and untrusted address strings are affected. Successful exploitation yields control of the return address. Having enabled...
CentOS 6 : glibc (CESA-2013:1605)
Updated glibc packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
glibc security, bug fix, and enhancement update
2.12-1.149 - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, 2.12-1.148 - Switch gettimeofday from INTUSE to libchiddenproto 1099025. 2.12-1.147 - Fix stack overflow due to large AFINET6 requests...
Stack overflow
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.18 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of AFINET6 address results. NOTE: th...
Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20131121)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions pvalloc, valloc, and memalign. If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of t...
Updated kernel-tmb packages fix multiple security vulnerabilities
This kernel-tmb update provides the extended stable 3.8.13.4 kernel and fixes the following security issues: The pcibackenablemsi function in the PCI backend driver drivers/xen/pciback/confspacecapabilitymsi.c in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access...
CVE-2013-2232
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
CVE-2013-2232
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
Design/Logic Flaw
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
CVE-2013-2232
The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...
SunOS Release 5.11 snv_101b - Remote IPv6 Crash
SunOS Release 5.11 snv101b - Remote IPv6 Crash / SunOS Release 5.11 Version snv101b Remote IPV6 Kernel Crash Exploit 0day By Kingcope/2009 / include include include include include include include include include include unsigned char rawData =...
SunOS Release 5.11 snv_101b - Remote IPv6 Crash
/ SunOS Release 5.11 Version snv101b Remote IPV6 Kernel Crash Exploit 0day By Kingcope/2009 / include include include include include include include include include include unsigned char rawData = "\x60\xfc\x57\x29\x00\x00\x3c\x56\x6f\x35\x40\x72\x70\x2f\x52\x58"...