Lucene search
+L

440 matches found

OSV
OSV
added 2021/07/10 8:0 p.m.5 views

MGASA-2021-0333 Updated libcroco and gettext packages fix security vulnerability

libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption CVE-2020-12825...

7.1CVSS6.8AI score0.02319EPSS
SaveExploits1References4
Mageia
Mageia
added 2021/07/10 8:0 p.m.41 views

Updated libcroco and gettext packages fix security vulnerability

libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption CVE-2020-12825...

7.1CVSS4.6AI score0.02319EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2020:2296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.04293EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/03 1:37 a.m.33 views

Security Bulletin: Vulnerability in GNU gettext affects IBM Spectrum Protect Plus (CVE-2018-18751)

Summary Denial of service vulnerability in GNU gettext may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2018-18751 DESCRIPTION: GNU gettext is vulnerable to a denial of service, caused by a double free flaw in the defaultaddmessage function in read-catalog.c. By persuading a...

9.8CVSS1.6AI score0.04293EPSS
SaveExploits1Affected Software1
Fedora
Fedora
added 2021/05/09 1:17 a.m.69 views

[SECURITY] Fedora 33 Update: babel-2.8.1-2.fc33

Babel is composed of two major parts: tools to build and work with gettext message catalogs a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc...

0.6AI score
SaveExploits0
Fedora
Fedora
added 2021/05/09 12:51 a.m.75 views

[SECURITY] Fedora 32 Update: babel-2.8.0-4.fc32

Babel is composed of two major parts: tools to build and work with gettext message catalogs a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/05/09 12:0 a.m.18 views

Fedora: Security Advisory for babel (FEDORA-2021-a499f89369)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8AI score
SaveExploits0References2
Fedora
Fedora
added 2021/05/03 2:7 a.m.36 views

[SECURITY] Fedora 34 Update: babel-2.9.1-1.fc34

Babel is composed of two major parts: tools to build and work with gettext message catalogs a Python interface to the CLDR Common Locale Data Repository, providing access to various locale display names, localized number and date formatting, etc...

0.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability in the `default_add_message` function of the `read-catalog.c` file in the GNU project’s library, related to the internationalization of Gettext, allows a hacker to repeatedly release a memory area, enabling them to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the defaultaddmessage function of the read-catalog.c file in the GNU project’s library is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

9.8CVSS6.7AI score0.04293EPSS
SaveExploits1References8Affected Software4
OSV
OSV
added 2021/03/15 8:55 p.m.5 views

USN-4779-1 php-gettext vulnerability

Danilo Segan discovered that Gettext mishandled certain input. An attacker could use this vulnerability to execute arbitrary code...

9.8CVSS6.8AI score0.06711EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2021/03/15 8:55 p.m.44 views

USN-4779-1: Gettext vulnerability

Danilo Segan discovered that Gettext mishandled certain input. An attacker could use this vulnerability to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:0 a.m.43 views

CentOS 8 : gettext (CESA-2019:3643)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3643 advisory. - gettext: double free in defaultaddmessage in read-catalog.c CVE-2018-18751 Note that Nessus has not tested for this issue but has instead relied only on the...

9.8CVSS6.9AI score0.04293EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/15 2:41 p.m.28 views

Security Bulletin: IBM Event Streams is affected by GNU gettext vulnerability CVE-2018-18751

Summary IBM Event Streams has addressed the following vulnerability Vulnerability Details CVEID: CVE-2018-18751 DESCRIPTION: GNU gettext is vulnerable to a denial of service, caused by a double free flaw in the defaultaddmessage function in read-catalog.c. By persuading a victim to open a...

9.8CVSS0.7AI score0.04293EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.15 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : gettext Vulnerability (NS-SA-2020-0104)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gettext packages installed that are affected by a vulnerability: - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read- catalog.c, related to an invalid free in pogramparse in...

9.8CVSS7AI score0.04293EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.32 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : gettext Vulnerability (NS-SA-2020-0070)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gettext packages installed that are affected by a vulnerability: - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read- catalog.c, related to an invalid free in pogramparse in...

9.8CVSS7AI score0.04293EPSS
SaveExploits1References2
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.283 views

glibc security, bug fix, and enhancement update

2.17-317.0.1 - Merge RH el7 u8 patches with Oracle patches Review-exception: Simple merge - Adding Mike Fabians C.utf-8 patch C.utf-8 is a unicode-aware version of the C locale Orabug 29784239. Reviewed-by: Jose E. Marchesi - Remove glibc-ora28641867.patch as duplicate of glibc-rh1705899-4.patch ...

8.1CVSS1.2AI score0.03871EPSS
SaveExploits0
Photon
Photon
added 2020/09/21 12:0 a.m.38 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0326

An update of 'gettext' packages of Photon OS has been released...

5.8CVSS0.9AI score0.02319EPSS
SaveExploits1
Photon
Photon
added 2020/09/21 12:0 a.m.27 views

Important Photon OS Security Update - PHSA-2020-0326

Updates of 'gettext' packages of Photon OS have been released...

7.1CVSS1.7AI score0.02319EPSS
SaveExploits1
OSV
OSV
added 2020/09/08 10:23 a.m.4 views

OPENSUSE-SU-2020:1385-1 Security update for gettext-runtime

This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...

9.8CVSS9.5AI score0.04293EPSS
SaveExploits1References5
OPENSUSE Linux
OPENSUSE Linux
added 2020/09/08 12:0 a.m.41 views

Security update for gettext-runtime (moderate)

openSUSE Security Update: Security update for gettext-runtime Announcement ID: openSUSE-SU-2020:1385-1 Rating: moderate References: 1106843 1113719 941629 Cross-References: CVE-2018-18751 Affected Products: openSUSE Backports SLE-15-SP1 An update that solves one vulnerability and has two fixes is...

9.8CVSS9.6AI score0.04293EPSS
SaveExploits1References3
Rows per page
Query Builder