CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

Debian dla-3704 : libxerces-c-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3704 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3704-1 [email protected]...

GNU C Library 安全漏洞

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that stems from not allocating enough space for assertion failure message strings and size information when the assert...

[SECURITY] [DLA 4024-1] poco security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4024-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 20, 2025 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

UBUNTU-CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

CVE-2024-57914 usb: typec: tcpci: fix NULL pointer issue on shared irq case

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

[SECURITY] Fedora 40 Update: stb-0^20241002git31707d1-4.fc40

Single-file public domain libraries for C/C++...

[SECURITY] Fedora 41 Update: stb-0^20241002git31707d1-5.fc41

Single-file public domain libraries for C/C++...

PT-2025-3639 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc6-06316-g7f63786ad3d1-dirty Description: The issue is related to a NULL pointer dereference in the tcpci irq function when handling shared interrupts. This can occur when two Type-C ports share an...

The vulnerability of the EditorConfig core library in the C programming language, related to buffer overflow in the stack, allows a malicious actor to trigger a service failure.

The vulnerability of the EditorConfig core library in the C programming language is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

Huawei EulerOS: Security Advisory for xmlrpc-c (EulerOS-SA-2025-1067)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : xmlrpc-c (EulerOS-SA-2025-1067)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

Huawei EulerOS: Security Advisory for xmlrpc-c (EulerOS-SA-2025-1050)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : xmlrpc-c (EulerOS-SA-2025-1050)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

Advisory ROSA-SA-2025-2562

Software: xerces-c 3.1.1 OS: rosa-server79 packageevrstring: xerces-c-3.1.1-10.0.1.res7 CVE-ID: CVE-2023-37536 BDU-ID: 2023-06960 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Heerces C++ library of the BigFix Platform IT Collaborative Management Platform is caused by an integer overflow...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a cross-site scripting vulnerability that stems from a reflected cross-site scripting vulnerability contained in the msgc parameter of the editarpermissoes.php file...

The vulnerability of the nilfs_clear_folio_dirty() function in the fs/nilfs2/page.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfsclearfoliodirty function in the fs/nilfs2/page.c module of the Linux kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...