528 matches found
CVE-2017-14199
A buffer overflow has been found in the Zephyr Project's getaddrinfo implementation in 1.9.0 and 1.10.0...
CVE-2017-14199
A buffer overflow has been found in the Zephyr Project's getaddrinfo implementation in 1.9.0 and 1.10.0...
PT-2019-7963
Name of the Vulnerable Software and Affected Versions Zephyr Project versions 1.9.0 through 1.10.0 Description A buffer overflow issue has been identified in the getaddrinfo implementation. Recommendations For versions 1.9.0 and 1.10.0, consider disabling the getaddrinfo function until a patch is...
CVE-2017-14199: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow has been found in the Zephyr Project's getaddrinfo implementation in 1.9.0 and 1.10.0...
openSUSE Security Update : keepalived (openSUSE-2019-1008)
This update for keepalived to version 2.0.10 fixes the following issues : Security issues fixed bsc1015141 : - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...
libc6 getaddrinfo Memory Exhaustion
The vulnerability of the libc6 library is related to insufficient validation of input data in the getaddrinfo function. With certain parameters, this function may call the ifnametoindex function in sysdeps/unix/sysv/linux/ifindex.c with incorrect parameters. Exploiting this vulnerability could...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
DEBIAN-CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
Code injection
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
UBUNTU-CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
CVE-2016-10739
CVE-2016-10739 affects glibc (getaddrinfo) up to version 2.28, where a string containing an IPv4 address followed by whitespace and extra characters could be misinterpreted as valid. This may allow an attacker to bypass validation or embed dangerous substrings in inputs that appear to be legitima...
CVE-2016-10739: Improper Input Validation
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
Denial Of Service (DoS)
glibc is vulnerable to denial of service. An invalid free flaw was found in glibc's getaddrinfo function when used with the AIIDN flag. A remote attacker able to make an application call this function could use this flaw to execute arbitrary code with the permissions of the user running the...
Medium: glibc
Issue Overview: In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function.CVE-2018-19591 Affected Packages: glibc Note: This adviso...
openSUSE Security Update : keepalived (openSUSE-2018-1575)
This update for keepalived to version 2.0.10 fixes the following issues : Security issues fixed bsc1015141 : - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...