The vulnerability of the GNU C Library, related to memory initialization errors, allows a perpetrator to gain access to confidential data.

The vulnerability of the GNU C Library is related to the incorrect handling of LDPREFERMAP32BITEXEC. Exploiting this vulnerability allows an attacker to access confidential data...

AZL-7486 CVE-2022-23218 affecting package glibc for versions less than 2.35-1

The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is not...

The vulnerability of the GNU C Library (glibc) is related to the use of memory after it is freed, allowing a hacker to perform a denial-of-service attack.

The vulnerability of the mqnotify function in the GNU C Library glibc is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Gnu Multiple Precision Arithmetic Library 输入验证错误漏洞

Gnu Multiple Precision Arithmetic Library Gmp is a free library for arbitrary precision arithmetic from the Gnu Project. It is used to perform arithmetic on signed integers, rational numbers and floating point numbers. A security vulnerability exists in GNU Multiple Precision Arithmetic Library G...

PT-2021-7355 · Gnu +8 · Gmp +8

Name of the Vulnerable Software and Affected Versions: GNU Multiple Precision Arithmetic Library GMP versions through 6.2.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the mpz/inp raw.c component of the GNU Multiple Precision Arithmetic Library GMP on...

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that when processed by the glob function would potentially lead to arbitrary code execution. This was fixed in version 2.32.

...

AZL-44787 CVE-2009-5155 affecting package metis 5.1.0.3-7

In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service assertion failure and application exit or trigger an incorrect result by attempting a regular-expression match...

PT-2019-19426

Name of the Vulnerable Software and Affected Versions GNU C Library aka glibc or libc6 versions prior to 2.30 Description The issue is related to Uncontrolled Recursion in the check dst limits calc pos 1 function in posix/regexec.c. This can be demonstrated by using a crafted pattern '|11' in gre...

AZL-45306 CVE-2015-8985 affecting package suitesparse 7.11.0-1

The popfailstack function in the GNU C Library aka glibc or libc6 allows context-dependent attackers to cause a denial of service assertion failure and application crash via vectors related to extended regular expression processing...

Debian: Security Advisory (DSA-3658-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3658-1 : libidn - security update

Hanno Boeck discovered multiple vulnerabilities in libidn, the GNU library for Internationalized Domain Names IDNs, allowing a remote attacker to cause a denial of service against an application using the libidn library application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 3658-1] libidn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3658-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq -...

DSA-3578-1 libidn - security update

Bulletin has no description...

Libtasn1 Denial of Service Vulnerability

Libtasn1 is a C library from the GNU project for developing ASN.1 structure management. A security vulnerability exists in Libtasn1 that allows attackers to conduct denial-of-service attacks...

UBUNTU-CVE-2015-8983

Integer overflow in the IOwstroverflow function in libio/wstrops.c in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors related to computing a size in bytes, which...

[SECURITY] [DLA 277-1] libidn security update

Package : libidn Version : 1.15-2+deb6u1 CVE ID : CVE-2015-2059 Thijs Alkemade discovered that the Jabber server may pass an invalid UTF-8 string to libidn, the GNU library for Internationalized Domain Names IDNs. In the case of the Jabber server, this results in information disclosure, and it is...

DLA-277-1 libidn - security update

Bulletin has no description...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the glibc-common-2.2.5 package of the Red Hat Linux operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

DEBIAN-CVE-2013-1914

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library aka glibc or libc6 2.17 and earlier allows remote attackers to cause a denial of service crash via a 1 hostname or 2 IP address that triggers a large number of domain conversion results...

glibc: fnmatch() alloca()-based memory corruption flaw

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to...