Lucene search
+L

2040 matches found

OSV
OSV
added 2025/01/22 1:15 p.m.12 views

AZL-55937 CVE-2025-0395 affecting package glibc for versions less than 2.35-9

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.1AI score0.00356EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/22 1:15 p.m.22 views

UBUNTU-CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7AI score0.00356EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/01/22 1:11 p.m.7 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.6AI score0.00356EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/01/22 1:11 p.m.41 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

0.00356EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/01/22 1:11 p.m.12 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.8AI score0.00356EPSS
SaveExploits0
CVE
CVE
added 2025/01/22 1:11 p.m.803 views

CVE-2025-0395

Summary (CVE-2025-0395) : The GNU C Library (glibc) versions 2.13 to 2.40 contain a buffer overflow in the assert() failure path where the failure message and size information are not allocated sufficiently, potentially overflowing the heap if the message size aligns to a page boundary. Connected...

6.2CVSS7.6AI score0.00356EPSS
SaveExploits0References12
OSV
OSV
added 2025/01/22 1:11 p.m.16 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.2AI score
SaveExploits0References14
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.9 views

GNU C Library 安全漏洞

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that stems from not allocating enough space for assertion failure message strings and size information when the assert...

7.5CVSS6.7AI score0.00356EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/01/10 12:0 a.m.9 views

PT-2025-3866

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.13 through 2.40 Description The issue is related to the assert function in the GNU C Library, which fails to allocate sufficient space for the assertion failure message string and size information. This may lead to a...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References78
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:0 a.m.11 views

The vulnerability of the getrandom() function in the system library glibc, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the getrandom function in the glibc system library is related to incomplete recognition of internal state. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.5CVSS6.6AI score
SaveExploits0References6Affected Software3
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.12 views

glibc 安全漏洞

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A security vulnerability exists in glibc version 2.40-12.fc41, which stems from a bug in the implementation of the getrandom function on the ppc64le architecture, resulting in an inability to generate a...

6.6AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/27 10:43 a.m.38 views

Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [CVE-2022-23219]

Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-23219 Vulnerability Details CVEID:CVE-2022-23219 DESCRIPTION: GNU C Library aka glibc is vulnerable to a stack-based buffer overflow, caused by...

9.8CVSS9.6AI score0.04211EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
added 2024/09/23 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.8833EPSS
SaveExploits17References2
VulnCheck KEV
VulnCheck KEV
added 2024/09/16 12:0 a.m.6 views

VulnCheck KEV: CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS7AI score0.8833EPSS
SaveExploits17References1
OpenVAS
OpenVAS
added 2024/08/21 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2212)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.5AI score0.8833EPSS
SaveExploits17References2
OpenVAS
OpenVAS
added 2024/08/21 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7.5AI score0.8833EPSS
SaveExploits17References2
OpenVAS
OpenVAS
added 2024/08/20 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2137)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.5AI score0.8833EPSS
SaveExploits17References2
Redos
Redos
added 2024/08/15 12:0 a.m.343 views

ROS-20240815-07

A vulnerability in the GNU C Library's nscd nameserver caching daemon is related to the returning a pointer outside the expected range. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the GNU C Library nscd nameserver caching daemon is...

8.1CVSS7AI score0.0131EPSS
SaveExploits0
OSV
OSV
added 2024/08/12 5:16 p.m.10 views

CLSA-2024-1723482999 glibc: Fix of CVE-2024-33599

CVE-2024-33599: fix buffer overflow in netgroup cache...

8.1CVSS6AI score0.0131EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/08/05 10:1 p.m.31 views

Security Bulletin: IBM Storage Ceph is vulnerable to an Out-of-bounds Write in the RHEL UBI (CVE-2024-2961)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. CVE-2024-2961. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: GNU C Library is vulnerable to a denial of service, caused by a...

7.3CVSS7.8AI score0.8833EPSS
SaveExploits17Affected Software1
Rows per page
Query Builder