2837 matches found
[SECURITY] Fedora 35 Update: libdxfrw-1.1.0-0.1.rc1.fc35
libdxfrw is a free C++ library to read and write DXF files in both formats, ASCII and binary form...
The vulnerability of the `sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S` component of the GNU C Library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S component of the GNU C Library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...
The vulnerability of the `glob` function in the `glob.c` component of the GNU C Library allows a attacker to cause a service failure.
The vulnerability of the glob function in the glob.c component of the GNU C Library is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...
Caryll OTFCC otfccdump+0x4fbbb6 denial of service vulnerability
Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A denial of service vulnerability exists in Caryll OTFCC, which originates from a segmentation conflict at /release-x64/otfccdump+0x4fbbb6. An attacker can exploit the vulnerability t...
Caryll OTFCC otfccdump+0x4fe954 denial of service vulnerability
Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A denial of service vulnerability exists in Caryll OTFCC, which originates from a segmentation conflict at /release-x64/otfccdump+0x4fe954. An attacker can exploit the vulnerability t...
The vulnerabilities of the `fillin_rpath` and `decompose_rpath` functions in the GNU C Library allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the fillinrpath and decomposerpath functions in the GNU C Library’s system library is related to an unreliable search path. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...
Vulnerability of the al__cpLocation stream function in libpthread, LinuxThreads libraries uClibC and uClibC-ng, allowing a hacker to execute arbitrary code
The vulnerabilities of the alcpLocation function in the libpthread library, as well as those in the linuxthreads library and uClibC and uClibC-ng libraries, are related to the possibility of memory corruption. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code by...
OTFCC has an unspecified vulnerability (CNVD-2023-11793)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /multiarch/memmove-vec-unaligned-erms.S. No detailed vulnerability details are currently available...
OTFCC has an unspecified vulnerability (CNVD-2023-11790)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x4fe9a7. No detailed vulnerability details are currently available...
OTFCC has an unspecified vulnerability (CNVD-2023-11792)
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x5266a8. No detailed vulnerability details are currently available...
Debian: Security Advisory (DSA-5236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the LD_LIBRARY_PATH environment variable allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the LDLIBRARYPATH environment variable in the GNU C Library is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
F5 Networks BIG-IP : GNU C Library vulnerability (K64119434)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K64119434 advisory. In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows...
Bento4 Denial of Service Vulnerability (CNVD-2023-27653)
Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.6.0-639 suffers from a denial-of-service vulnerability that stems from AP4CttsAtom::Create in its Core/Ap4CttsAtom.cpp component, which may consume too much memory. An attacker could exploit the vulnerability t...
The vulnerability of the netgroupcache.c component of the server caching daemon nscd in the GNU C Library allows a attacker to cause a service failure.
The vulnerability of the netgroupcache.c component, a caching daemon for system name services in the GNU C Library, is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause service failures...
Fedora: Security Advisory for libtar (FEDORA-2022-44a20bba43)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2014-9984: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer
Security Advisory ID : BSA-2022-607 Component : GNU C Library Revision : 1.1 nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as...
CVE-2018-6485: An integer overflow in the implementation of the posix_memalign
Security Advisory ID : BSA-2022-623 Component : GNU C Library Revision : 1.0 An integer overflow in the implementation of the posixmemalign in memalign functions in the GNU C Library aka glibc or libc6 2.26 and earlier could cause these functions to return a pointer to a heap area that is too...
CVE-2019-9169. Heap-based buffer over-read in the GNU C Library. (BSA-2022-776)
Security Advisory ID: BSA-2022-776 Component: GNU C Library Revision: 2.0 In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. Notes: Brocade PSIRT has confirmed that...