6348 matches found
Amazon Linux AMI : glibc (ALAS-2016-660)
It was discovered that the calloc implementation in glibc could return memory areas which contain non-zero bytes. This could result in unexpected application behavior such as hangs or crashes. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Debian Debian_Linux
PoC attack server for CVE-2015-7547 vulnerability in glibc DNS...
Low: glibc
Issue Overview: It was discovered that the calloc implementation in glibc could return memory areas which contain non-zero bytes. This could result in unexpected application behavior such as hangs or crashes. Affected Packages: glibc Issue Correction: Run yum update glibc or yum update --advisory...
Fedora 23 : glibc-2.22-9.fc23 (2016-0f9e9a34ce)
This updates addresses a critical security vulnerability in the DNS resolver related to AFUNSPEC queries with getaddrinfo CVE-2015-7547. In addition, a bug that causes Hesiod lookups to fail with a crash is fixed. Note that Tenable Network Security has extracted the preceding description block...
VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0010) (remote check)
The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - DHCP - glibc %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
SOL09052213 - glibc vulnerability CVE-2015-8777
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Security Advisory - GNU Glibc Buffer Overflow Security Vulnerability
Google security research team disclosed a buffer overflow vulnerability in GNU C library glibc CVE-2015-7547 on February 16, 2016, remote attackers can exploit the vulnerability to execute arbitrary code on an affected device. Vulnerability ID: HWPSIRT-2016-02018 This vulnerability has been...
Fedora 23 : perl-5.22.1-351.fc23 (2016-5d4fc5ecc9)
Fix manipulating environment variables to align with how glibc handles duplicated environment variables. Perl now uses the first variable listed in the environment array and it removes any subsequent entries of the same-named variable from the array, so that child processes have only one variable...
Fedora 22 : glibc-2.21-11.fc22 (2016-0480defc94)
This updates addresses a critical security vulnerability in the DNS resolver related to AFUNSPEC queries with getaddrinfo CVE-2015-7547. It also includes security fixes for CVE-2015-8777 and CVE-2015-1781. It improves malloc scalability for applications which start and terminate many threads. The...
Fedora 23 : glibc-2.22-6.fc23 (2015-7174c4d68d)
This update re-adds large file support to the openat function, removes support for the LDPOINTERGUARD environment variable which could be used to weaken security protections in ATSECURE/SUID binaries, and adds function pointer obfuscation to the TLS destructor list. Note that Tenable Network...
VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0001) (remote check)
The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - glibc - glibc-common - nscd - openldap - sudo %NASLMINLEVEL 70300 C Tenab...
openSUSE: Security Advisory for glibc (openSUSE-SU-2016:0490-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for glibc (openSUSE-SU-2016:0510-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for glibc (openSUSE-SU-2016:0512-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries : - Apache Struts - glibc - GnuTLS - JRE - kernel - libxml2 - OpenSSL - Perl - popt and...
glibc: unbound stack usage
CVE-2014-9761 unbound stack usage The nan, nanf and nanl functions no longer have unbounded stack usage depending on the length of the string passed as an argument to the functions...
lib32-glibc: unbound stack usage
CVE-2014-9761 unbound stack usage The nan, nanf and nanl functions no longer have unbounded stack usage depending on the length of the string passed as an argument to the functions...
GNU glibc 'strftime()' Function Memory Corruption Vulnerability
GNU glibc is an open source, free C compiler released under the LGPL license. A memory corruption vulnerability exists in the GNU glibc 'strftime' function, which could be exploited by an attacker to crash an application, resulting in a denial of service attack...
GNU glibc 'misc/hsearch_r.c' integer overflow vulnerability
GNU glibc is an open source, free C compiler released under the LGPL license. A remote integer overflow vulnerability exists in GNU glibc 'misc/hsearchr.c', which allows attackers to exploit the vulnerability to crash an application, resulting in a denial of service attack...
