CVE-2011-4609

CVE-2011-4609 affects the GNU C Library (glibc) prior to 2.15. The vulnerability is in the svc_run function used by the RPC implementation, allowing remote attackers to cause a denial of service via a large number of RPC connections. The issue is documented with a CVSS v2 base score of 5.0 (Mediu...

CVE-2012-0864

Summary (CVE-2012-0864) The vulnerability is in the GNU C Library (glibc) via an integer/format string flaw in the vfprintf path (stdio-common/vfprintf.c) affecting glibc 2.14 and other versions. A context-dependent attacker could bypass Fortify_SOURCE, perform format-string attacks, and write to...

CVE-2011-4609

The svcrun function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service CPU consumption via a large number of RPC connections...

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

CVE-2009-5029

Integer overflow in the tzfileread function in glibc before 2.15 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted timezone TZ file, as demonstrated using vsftpd...

CVE-2009-5029

CVE-2009-5029 stems from an integer overflow in glibc's __tzfile_read, affecting glibc versions prior to 2.15. The issue allows context-dependent attackers to crash the process (DoS) and potentially execute arbitrary code via a crafted timezone (TZ) file, with demonstrations reported using vsftpd...

Sudo v1.8.0-1.8.3p1 (sudo_debug) - Root Exploit

sudo versions 1.8.0 through 1.8.3p1 sudodebug root exploit with glibc FORTIFYSOURCE bypass. include include include include include include include include include include define OFFSET 65000 define NUMTHREADS 0 / files that we create on disk / define BACKDOOR "e.c" define BDCOMPILED "e" define...

sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation

/ death-star.c sudo v1.8.0-1.8.3p1 sudodebug format string root exploit + glibc FORTIFYSOURCE bypass by aeon - http://infosecabsurdity.wordpress.com/ This PoC exploits: - CVE-2012-0864 - FORTIFYSOURCE format string protection bypass via "nargs" integer overflow - CVE-2012-0809 - sudo v1.8.0-1.8.3...

sudo 1.8.0 1.8.3p1 - sudo_debug glibc FORTIFY_SOURCE Bypass + Privilege Escalation

sudo 1.8.0 1.8.3p1 - sudodebug glibc FORTIFYSOURCE Bypass + Privilege Escalation / death-star.c sudo v1.8.0-1.8.3p1 sudodebug format string root exploit + glibc FORTIFYSOURCE bypass by aeon - http://infosecabsurdity.wordpress.com/ This PoC exploits: - CVE-2012-0864 - FORTIFYSOURCE format string...

CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

Stack overflow

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

CVE-2013-1914

The CVE-2013-1914 issue affects the GNU C Library (glibc) up to version 2.17, where a stack-based buffer overflow in getaddrinfo could be triggered by a crafted hostname or IP, causing remote denial of service. Public details consistently reference an incomplete fix that ties into CVE-2013-4458 a...

CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

CentOS 5 : glibc (CESA-2013:0769)

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20130424)

It was found that getaddrinfo did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash. CVE-2013-1914 A flaw was...

CentOS Update for glibc CESA-2013:0769 centos5

Check for the Version of glibc OpenVAS Vulnerability Test CentOS Update for glibc CESA-2013:0769 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for glibc RHSA-2013:0769-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for glibc RHSA-2013:0769-01

Check for the Version of glibc OpenVAS Vulnerability Test RedHat Update for glibc RHSA-2013:0769-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...