2 matches found
CVE-2005-3590
The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...
9.8CVSS9.7AI score0.02089EPSS
SaveExploits0References3
glibc: getgrouplist buffer overflow vulnerability
Background glibc is the GNU C library. Description A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too small to hold all the user's groups. This overflow can cause segmentation faults in user applications. This vulnerability exists only when an...
7.5CVSS6.7AI score0.02176EPSS
SaveExploits0
20