glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

glibc: Fix out-of-bounds array write in tdelete

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...

CVE-2026-0915-json-Patch.-V2.0

CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical vulnerability in JSON parsing...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...

CVE-2021-4034

CVE-2021-4034 This is an exploit created for CVE-2021-4034 meant as a POC. It is based off the info at https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. How to use it: Download the exploit folder. Compile prog.c with gcc prog.c Go to the GCONVPATH=. folder and ensure that the "code" fil...

CVE-2024-6387_PoC

Summary This is essentially a statistical vulnerability: a large number of attempts are required to win the race condition and successfully execute arbitrary code. Attackers need to overcome many obstacles, Schwartz told SecurityWeek. "Even in the best-case scenario, the most well-known...

pkwned

pkwned: Proof of Concept for CVE-2021-4034 This PoC will run PAYLOADPATH as defined in constants.h with root privileges from a vulnerable version of pkexec running on glibc. The directory "GCONVPATH=." needs to contain an executable file named after the directory containing the gconv module. As...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

looneyCVE

Step 1 Check the glibc version ldd --version Check if a machine is vulnerable to Looney Tunables CVE-2023-4911 env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help If we get a Segmentation fault core dumped, then machine is vulnerable. Step 2...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: glibc: Process abort due to invalid memory in wordexp

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

glibc: Fix out-of-bounds array write in tdelete

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

glibc: Buffer Overflow in strfmon right-justification padding

A flaw was found in glibc. The strfmon and strfmonl functions are vulnerable to a buffer overflow when processing right-justified width padding. This occurs because an incorrect length is used for an internal memory operation, causing data to be written beyond its intended buffer. An attacker cou...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. CVE-2026-8674: reachable assert in...

SUSE-SU-2026:4591-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. - CVE-2026-8674: reachable assert in...

openssh-cve-2024-6387.sh

OpenSSH CVE-2024-6387 A vulnerability CVE-2024-6387 has been discovered in OpenSSH. Successful exploitation of this vulnerability allows a remote, unauthenticated attacker to execute arbitrary code as root on the target machine. All the glibc-based Linux distributions that have OpenSSH exposed ar...