Lucene search
+L

20457 matches found

SUSE CVE
SUSE CVE
•added 2024/04/18 2:31 a.m.•20 views

SUSE CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

8.2CVSS6.9AI score0.8833EPSS
SaveExploits19References11
RedHat Linux
RedHat Linux
•added 2024/04/18 2:25 a.m.•20 views

gnutls: vulnerable to Minerva side-channel information leak

A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, it can result in a noticeable step in nonce...

5.3CVSS6.3AI score0.00724EPSS
SaveExploits0References6
Fedora
Fedora
•added 2024/04/18 1:14 a.m.•38 views

[SECURITY] Fedora 38 Update: cockpit-311.2-1.fc38

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

7.3CVSS7.2AI score0.01191EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/04/18 12:00 a.m.•131 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : GNU C Library vulnerability (USN-6737-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6737-1 advisory. Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to...

7.3CVSS7.5AI score0.8833EPSS
SaveExploits19References2
Tenable Nessus
Tenable Nessus
•added 2024/04/18 12:00 a.m.•36 views

Slackware Linux 15.0 / current aaa_glibc-solibs Vulnerability (SSA:2024-109-01)

The version of aaaglibc-solibs installed on the remote host is prior to 2.33 / 2.39. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-109-01 advisory. - The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to ...

7.3CVSS7AI score0.8833EPSS
SaveExploits19References2
Photon
Photon
•added 2024/04/18 12:00 a.m.•18 views

Important Photon OS Security Update - PHSA-2024-5.0-91-0250

Updates of 'glibc' packages of Photon OS have been released...

7.3CVSS7AI score0.8833EPSS
SaveExploits19
NVD
NVD
•added 2024/04/17 6:15 p.m.•42 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS5.8AI score0.8833EPSS
SaveExploits19References20
osv_debian
osv_debian
•added 2024/04/17 6:15 p.m.•19 views

DEBIAN-CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS6.9AI score0.8833EPSS
SaveExploits19References1
Cvelist
Cvelist
•added 2024/04/17 5:27 p.m.•151 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

9AI score0.8833EPSS
SaveExploits19References16
osv_cve
osv_cve
•added 2024/04/17 5:27 p.m.•27 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS7.5AI score
SaveExploits0References22
Mend
Mend
•added 2024/04/17 5:27 p.m.•5 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS6.9AI score0.8833EPSS
SaveExploits19References22
Vulnrichment
Vulnrichment
•added 2024/04/17 5:27 p.m.•39 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

6.9AI score0.8833EPSS
SaveExploits19References16
CVE
CVE
•added 2024/04/17 5:27 p.m.•2609 views

CVE-2024-2961

The iconv() function in the GNU C Library (glibc) versions 2.39 and older is vulnerable to a buffer overflow of up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set. This flaw can be exploited to crash applications or overwrite neighboring variables. In environments running ...

7.3CVSS6.9AI score0.8833EPSS
SaveIn wildExploits19References20Affected Software3
Debian CVE
Debian CVE
•added 2024/04/17 5:27 p.m.•81 views

CVE-2024-2961

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS6.9AI score0.8833EPSS
SaveExploits19
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•19 views

GNU C Library security vulnerabilities

GNU C Library is an open source, free C compiler released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that originates from a boundary error in the iconv function when handling untrusted input. An attacker could exploit the vulnerability to cause the...

7.3CVSS7.2AI score0.8833EPSS
SaveExploits19References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•3 views

CVE-2024-2961: Out-of-bounds Write

The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...

7.3CVSS7AI score0.8833EPSS
SaveExploits19References2
GithubExploit
GithubExploit
•added 2024/04/13 11:55 a.m.•451 views

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

This repo contains a script to set up the safe environment for e...

10CVSS8.8AI score0.99999EPSS
SaveExploits49
Positive Technologies
Positive Technologies
•added 2024/04/12 12:00 a.m.•3 views

PT-2024-6057

Name of the Vulnerable Software and Affected Versions GNU Nano affected versions not specified Description A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file wi...

6.7CVSS6.5AI score0.00344EPSS
SaveExploits0References63
osv_cve
osv_cve
•added 2024/04/11 6:15 a.m.•30 views

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...

7.6CVSS6.1AI score0.00948EPSS
SaveExploits2References1
NVD
NVD
•added 2024/04/11 6:15 a.m.•28 views

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...

7.6CVSS7.7AI score0.00948EPSS
SaveExploits2References1
Rows per page
Query Builder