Lucene search
+L

2319 matches found

Cvelist
Cvelist
•added 2025/01/22 1:11 p.m.•53 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

0.00356EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/22 1:11 p.m.•9 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.6AI score0.00356EPSS
SaveExploits0References4
OSV
OSV
•added 2025/01/22 1:11 p.m.•18 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.2AI score
SaveExploits0References14
CVE
CVE
•added 2025/01/22 1:11 p.m.•845 views

CVE-2025-0395

The GNU C Library (glibc) (versions 2.13 to 2.40) contains a vulnerability where the assert() function fails to allocate sufficient space for assertion failure message strings and size information. This flaw can lead to a buffer overflow if the message string size aligns with the page size. Affec...

6.2CVSS6.9AI score0.00356EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2025/01/22 1:11 p.m.•21 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.8AI score0.00356EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•15 views

GNU C Library 安全漏洞

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that stems from not allocating enough space for assertion failure message strings and size information when the assert...

7.5CVSS6.7AI score0.00356EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•3 views

CVE-2025-0395: Incorrect Calculation of Buffer Size

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.1AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/10 12:00 a.m.•12 views

PT-2025-3866

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.13 through 2.40 Description The issue is related to the assert function in the GNU C Library, which fails to allocate sufficient space for the assertion failure message string and size information. This may lead to a...

7.8CVSS7.1AI score0.00356EPSS
SaveExploits0References78
BDU FSTEC
BDU FSTEC
•added 2024/12/19 12:00 a.m.•16 views

The vulnerability of the getrandom() function in the system library glibc, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the getrandom function in the glibc system library is related to incomplete recognition of internal state. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.5CVSS6.6AI score
SaveExploits0References6Affected Software3
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

glibc 安全漏洞

glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A security vulnerability exists in glibc version 2.40-12.fc41, which stems from a bug in the implementation of the getrandom function on the ppc64le architecture, resulting in an inability to generate a...

6.6AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2024/09/27 10:43 a.m.•45 views

Security Bulletin: Vulnerability in glibc affects IBM Integrated Analytics System [CVE-2022-23219]

Summary Redhat provided glibc is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-23219 Vulnerability Details CVEID:CVE-2022-23219 DESCRIPTION: GNU C Library aka glibc is vulnerable to a stack-based buffer overflow, caused by...

9.8CVSS7.5AI score0.04293EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
•added 2024/09/23 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.8833EPSS
SaveExploits18References2
VulnCheck KEV
VulnCheck KEV
•added 2024/09/16 12:00 a.m.•12 views

VulnCheck KEV: CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS7AI score0.8833EPSS
SaveIn wildExploits18References3
OpenVAS
OpenVAS
•added 2024/08/21 12:00 a.m.•37 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2212)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7AI score0.8833EPSS
SaveExploits18References2
OpenVAS
OpenVAS
•added 2024/08/21 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3CVSS7AI score0.8833EPSS
SaveExploits18References2
OpenVAS
OpenVAS
•added 2024/08/20 12:00 a.m.•43 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2137)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.9AI score0.8833EPSS
SaveExploits18References2
Redos
Redos
•added 2024/08/15 12:00 a.m.•351 views

ROS-20240815-07

A vulnerability in the GNU C Library's nscd nameserver caching daemon is related to the returning a pointer outside the expected range. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the GNU C Library nscd nameserver caching daemon is...

8.1CVSS7AI score0.0131EPSS
SaveExploits0
OSV
OSV
•added 2024/08/12 5:16 p.m.•14 views

CLSA-2024-1723482999 glibc: Fix of CVE-2024-33599

CVE-2024-33599: fix buffer overflow in netgroup cache...

8.1CVSS6AI score0.0131EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/08/05 10:01 p.m.•33 views

Security Bulletin: IBM Storage Ceph is vulnerable to an Out-of-bounds Write in the RHEL UBI (CVE-2024-2961)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. CVE-2024-2961. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: GNU C Library is vulnerable to a denial of service, caused by a...

7.3CVSS7AI score0.8833EPSS
SaveExploits18Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/08/01 12:00 a.m.•57 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.5.6.5)

The version of AOS installed on the remote host is prior to 6.5.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.5.6.5 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause ...

8.1CVSS6.8AI score0.99988EPSS
SaveExploits20References11
Rows per page
Query Builder