Denial Of Service (DoS)

GNU C Library is vulnerable to denial of service DoS attacks. Use of a long catalog name in the catopen function may cause a stack-based buffer overflow allowing a context-dependent attacker to cause denial of service via an application crash or possible execution of arbitrary code...

Arbitrary Code Execution And Denial Of Service (DoS)

GNU C Library is vulnerable to arbitrary code execution and denial of service. An context-dependent attacker could trigger an out-of-bounds heap-memory access via the size argument to the hcreater function to cause a denial of service or possibly execute arbitrary code...

Denial Of Service (DoS)

GNU C Library is vulnerable to denial of service DoS attacks. An out-of-range time values passed to the strftime function could result in an out-of-bounds memory access allowing attackers to cause a application crash or possibly obtain sensitive information...

DEBIAN-CVE-2006-7254

The nscd daemon in the GNU C Library glibc before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2006-7254

The nscd daemon in the GNU C Library glibc before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon...

CVE-2006-7254

The nscd daemon in the GNU C Library glibc before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon...

CVE-2006-7254

The CVE concerns the nscd daemon in the GNU C Library (glibc) prior to 2.5. The vulnerability arises because nscd does not close incoming client sockets that it cannot handle, enabling local users to perform a denial of service against the daemon. Affected component: nscd within glibc (before 2.5...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2005-3590: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

PT-2019-6486

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.5 Description The issue allows local users to carry out a denial of service attack on the nscd daemon in the GNU C Library. This occurs because the daemon does not close incoming client sockets if they cannot be...

BSA-2018-606

Security Advisory ID : BSA-2018-606 Component : bzip2recover Revision : 2.0 The GNU C Library aka glibc or libc6 before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the operator follow...

The vulnerability of the memcmp function in the GNU C library (glibc) arises from insufficient input validation, allowing attackers to trigger a denial-of-service attack.

The vulnerability of the memcmp function in the GNU C library glibc is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a system failure...

GLSA-201903-09 : GNU C Library: Arbitrary descriptor allocation

The remote host is affected by the vulnerability described in GLSA-201903-09 GNU C Library: Arbitrary descriptor allocation A vulnerability was discovered in the GNU C Library functions xdrbytes and xdrstring. Impact : A remote attacker, by sending a crafted UDP packet, could cause a Denial of...

CVE-2019-9192

In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '|\\1\\1' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs...

CVE-2019-9169

In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...

Unspecified Vulnerability in GNU C Library (CNVD-2019-22412)

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. An unspecified vulnerability exists in the 'checkdstlimitscalcpos1' function in the posix/regexec.c file in GNU C Library version 2.29 and earlier. An attacker could exploit this vulnerability to...

CVE-2009-5155

In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service assertion failure and application exit or trigger an incorrect result by attempting a regular-expression match...

GNU C Library Stack Buffer Overflow Vulnerability

The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A stack buffer overflow vulnerability exists in the checkdstlimitscalcpos1 of the posix/regexec.c file in GNU C Library version 2.29 and earlier. No details of the vulnerability are provided at this...