Lucene search
+L

165 matches found

RedHat Linux
RedHat Linux
•added 2022/10/25 9:07 a.m.•18 views

golang: path/filepath: stack exhaustion in Glob

A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability...

7.5CVSS6.6AI score0.02069EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2022/09/28 12:00 a.m.•24 views

GNU C Library glob DoS

The vulnerability of the glob function in the glob.c component of the GNU C Library is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.1CVSS6.7AI score0.01431EPSS
SaveExploits0References7Affected Software2
osv_oesa
osv_oesa
•added 2022/08/05 11:05 a.m.•17 views

OESA-2022-1797 golang security update

The Go Programming Language. Security Fixes: Calling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion.CVE-2022-30630...

6.2CVSS6.9AI score0.02069EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2022/08/02 9:56 a.m.•16 views

golang: path/filepath: stack exhaustion in Glob

A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability...

7.5CVSS7.3AI score0.02069EPSS
SaveExploits0References6
Veracode
Veracode
•added 2022/07/25 1:14 p.m.•39 views

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists in Glob function in match.go due to stack exhaustion because having a large number of path separators in Glob which allows an attacker to cause an application crash...

7.5CVSS7.6AI score0.02069EPSS
SaveExploits0References10Affected Software18
BDU FSTEC
BDU FSTEC
•added 2021/06/18 12:00 a.m.•15 views

glibc Heap Use-After-Free Privilege Escalation

The vulnerability of the glob function in the glibc library of the Aurora operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7CVSS7.1AI score0.00549EPSS
SaveExploits0References11Affected Software5
Veracode
Veracode
•added 2020/11/05 3:15 a.m.•50 views

Arbitrary Code Execution

glibc is vulnerable to arbitrary code execution. A use-after-free in the glob function when expanding user allows an attacker to execute arbitrary code on the host OS...

7CVSS4AI score0.00549EPSS
SaveExploits0References15Affected Software1
NVD
NVD
•added 2020/04/30 5:15 p.m.•43 views

CVE-2020-1752

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially...

7CVSS7.2AI score0.00549EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2020/04/30 5:15 p.m.•68 views

CVE-2020-1752

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially...

7CVSS7AI score0.00549EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/30 12:00 a.m.•5 views

CVE-2020-1752: Use After Free

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially...

7CVSS7.5AI score0.00549EPSS
SaveExploits0References14
Mend
Mend
•added 2020/04/30 12:00 a.m.•5 views

CVE-2020-1752

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially...

7.3CVSS0.00549EPSS
SaveExploits0References15
RedhatCVE
RedhatCVE
•added 2020/03/06 5:10 p.m.•49 views

CVE-2020-1752

A use-after-free vulnerability was found in glibc in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processe...

7CVSS7AI score0.00549EPSS
SaveExploits0References3
Broadcom
Broadcom
•added 2019/04/01 12:00 a.m.•24 views

BSA-2018-616

Security Advisory ID : BSA-2018-616 Component : bzip2recover Revision : 2.0 The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator. Affected Products Security update provided inBrocade Fabric OS...

9.8CVSS9.6AI score0.02801EPSS
SaveExploits0
Broadcom
Broadcom
•added 2019/04/01 12:00 a.m.•23 views

BSA-2018-606

Security Advisory ID : BSA-2018-606 Component : bzip2recover Revision : 2.0 The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator follow...

9.8CVSS7.5AI score0.02977EPSS
SaveExploits0
Veracode
Veracode
•added 2019/01/15 9:23 a.m.•44 views

Arbitrary Code Execution

glibc is vulnerable to arbitrary code execution. A buffer overflow vulnerability in the glob function in glob.c, caused by an off-by-one error, allows an attacker to execute arbitrary code and escalate his privileges...

9.8CVSS9.8AI score0.02977EPSS
SaveExploits0References8Affected Software1
Amazon
Amazon
•added 2018/07/24 12:00 a.m.•68 views

Medium: glibc

Issue Overview: stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary...

9.8CVSS9.2AI score0.07051EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2018/06/19 4:59 a.m.•22 views

glibc: Buffer overflow in glob with GLOB_TILDE

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

9.8CVSS7.6AI score0.02977EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/04/10 8:47 a.m.•14 views

glibc: Buffer overflow during unescaping of user names with the ~ operator

The glob function in glob.c in the GNU C Library aka glibc or libc6 before 2.27 contains a buffer overflow during unescaping of user names with the operator...

9.8CVSS7.6AI score0.02801EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2018/04/10 8:47 a.m.•11 views

glibc: Buffer overflow in glob with GLOB_TILDE

The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator followed by a long string...

9.8CVSS7.6AI score0.02977EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2018/01/16 12:00 a.m.•79 views

openSUSE: Security Advisory for glibc (openSUSE-SU-2018:0089-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.4AI score0.13368EPSS
SaveExploits16References2
Rows per page
Query Builder