6348 matches found
Code injection
nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd...
CVE-2014-9984
nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd...
CVE-2014-9984
nscd in the GNU C Library aka glibc or libc6 before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd...
CVE-2014-9984
CVE-2014-9984 affects the GNU C Library (glibc) nscd when processing netgroup requests: the internal buffer size is not computed correctly, which can cause an nscd daemon crash or allow code execution as the user running nscd. The vulnerability is tied to glibc versions prior to 2.20. Several adv...
CVE-2016-4973
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection SSP might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature...
Internet Bug Bounty: rpcbind "rpcbomb" CVE-2017-8779, CVE-2017-8804
Description: this allowed an attacker to easily disrupt a remote system through excessive memory consumption. Writeup: https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ Demonstration video: https://www.youtube.com/watch?v=b38H3oEgrQw this video shows...
CVE-2017-9098
It was discovered that ImageMagick does not properly guarantee that initialized memory is used when reading RLE images. A remote attacker could possibly exploit this flaw to disclose potentially sensitive memory contents by, for example, tricking ImageMagick into converting a specially crafted RL...
GNU C Library 'xdr_bytes' and 'xdr_string' Function Denial of Service Vulnerability
The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A denial of service vulnerability exists in the 'xdrbytes' and 'xdrstring' functions in GNU C Library version 2.25, which stems from the program failing to properly handle buffer...
CVE-2017-8804
The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...
CVE-2017-8804
The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...
CVE-2017-8804
The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...
CVE-2017-8804
CVE-2017-8804 affects glibc (libc6) 2.25 and permits denial of service via crafted UDP packets to port 111 due to mishandled failures in xdr_bytes/xdr_string during buffer deserialization. It is related to CVE-2017-8779 (RPC/BIND) which in other sources is described as a memory-exhaustion vulnera...
EulerOS 2.0 SP1 : glibc (EulerOS-SA-2016-1073)
According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack overflow vulnerability was found in nssdnsgetnetbynamer.On systems with nsswitch configured to include 'networks: dns' with a privileged or...
CVE-2017-8305
The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...
CVE-2017-8305
The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...
CVE-2017-8305
The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...
CVE-2017-8305
The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...
CVE-2017-8305
The CVE-2017-8305 entry concerns UDFclient’s custom strlcpy implementation, which has a buffer overflow in versions before 0.8.8. The vulnerability affects UDFclient where the built-in strlcpy is used only on systems whose C library (e.g., glibc) lacks strlcpy. Upgrade to 0.8.8 or later to mitiga...
