Lucene search
K

16954 matches found

NVD
NVD
added 2025/02/16 3:15 p.m.7 views

CVE-2025-1352

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

7.5CVSS0.00614EPSS
Exploits1References8
AlpineLinux
AlpineLinux
added 2025/02/16 3:15 p.m.6 views

CVE-2025-1352

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

7.5CVSS7.2AI score0.00614EPSS
Exploits1References7
OSV
OSV
added 2025/02/16 3:15 p.m.4 views

CVE-2025-1352

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

7.5CVSS5.1AI score
Exploits0References7
OSV
OSV
added 2025/02/16 3:15 p.m.0 views

UBUNTU-CVE-2025-1352

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

7.5CVSS4.8AI score0.00614EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/02/16 2:31 p.m.9 views

CVE-2025-1352 GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

5.1CVSS0.00614EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/02/16 2:31 p.m.6 views

CVE-2025-1352 GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

5.1CVSS6.8AI score0.00614EPSS
Exploits1References7
CVE
CVE
added 2025/02/16 2:31 p.m.69 views

CVE-2025-1352

CVE-2025-1352 concerns GNU elfutils 0.192. The vulnerability affects the __libdw_thread_tail function in eu-readelf (libdw_alloc.c), where manipulation of the w argument leads to memory corruption. Nessus/NVD entries describe remote exploitation with high complexity and publicly disclosed exploit...

7.5CVSS6.9AI score0.00614EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2025/02/16 2:31 p.m.4 views

CVE-2025-1352

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...

7.5CVSS4.5AI score0.00614EPSS
Exploits1
NVD
NVD
added 2025/02/16 4:15 a.m.11 views

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS0.00233EPSS
Exploits0References2
OSV
OSV
added 2025/02/16 4:15 a.m.10 views

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS6.9AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/16 12:0 a.m.6 views

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS6.9AI score0.00233EPSS
Exploits0References2
CVE
CVE
added 2025/02/16 12:0 a.m.267 views

CVE-2024-57970

CVE-2024-57970 affects libarchive up to 3.7.7, introducing a heap-based buffer over-read in header_gnu_longlink when handling GNU long linknames within TAR archives. The root cause is improper truncation handling in the middle of a GNU long linkname, which can lead to memory read vulnerabilities ...

4CVSS7.1AI score0.00233EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.3 views

PT-2025-6905

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A vulnerability was found in GNU elfutils, affecting the function elf strptr in the library /libelf/elf strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to...

7.8CVSS5.3AI score0.00614EPSS
Exploits5References39
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.4 views

PT-2025-6906

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A problem has been found in GNU elfutils that affects the gelf getsymshndx function of the file strip.c in the eu-strip component. This issue leads to denial of service and must be approached locally. T...

7.8CVSS4.9AI score0.00614EPSS
Exploits6References45
AlpineLinux
AlpineLinux
added 2025/02/16 12:0 a.m.6 views

CVE-2024-57970

libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...

4CVSS7AI score0.00233EPSS
Exploits0
OSV
OSV
added 2025/02/13 8:34 p.m.17 views

RLSA-2025:1338 Moderate: gcc-toolset-14-gcc security update

The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.9CVSS7.5AI score0.8383EPSS
Exploits6References2
OSV
OSV
added 2025/02/13 10:4 a.m.16 views

RHSA-2025:1346 Red Hat Security Advisory: gcc security update

Bulletin has no description...

6.1CVSS7.3AI score0.8383EPSS
Exploits6References9
OSV
OSV
added 2025/02/12 10:4 a.m.16 views

RHSA-2025:1308 Red Hat Security Advisory: gcc security update

Bulletin has no description...

6.1CVSS7.3AI score0.8383EPSS
Exploits6References9
SUSE CVE
SUSE CVE
added 2025/02/12 3:49 a.m.3 views

SUSE CVE-2025-1153

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfdsetformat of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The...

4.4AI score0.01252EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2025/02/12 3:49 a.m.4 views

SUSE CVE-2025-1179

A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfdputl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather hig...

4.7AI score0.00523EPSS
Exploits1References6
Rows per page
Query Builder