UBUNTU-CVE-2019-11637

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

CVE-2019-11640

An issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the function recfexparsestrsimple at rec-fex.c in librec.a...

CVE-2019-11640

CVE-2019-11640 affects GNU Recutils 1.8 (notably 1.8.90 in some advisories). The issue is a heap-based buffer overflow in rec_fex_parse_str_simple (rec-fex.c) within librec.a. Impacted versions may crash or become unstable due to memory corruption. Several connected advisories confirm the vulnera...

CVE-2019-11639

CVE-2019-11639 affects GNU Recutils 1.8, with a stack-based buffer overflow in rec_type_check_enum (rec-types.c, librec.a). The vulnerability’s impact is described as potentially enabling partial confidentiality/integrity/availability impact, with CVSS v3 base score 8.8 (HIGH) and CVSS v2 base sc...

CVE-2019-11639

An issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the function rectypecheckenum at rec-types.c in librec.a...

CVE-2019-11638

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recfieldnameequalp at rec-field-name.c in librec.a, leading to a crash...

CVE-2019-11638

GNU recutils 1.8 contains a NULL pointer dereference in rec_field_name_equal_p (rec-field-name.c in librec.a) that leads to a crash. Multiple sources (NVD, OSV, CNVD, Ubuntu USN-7137-1, and related advisories) reference CVE-2019-11638 and link it to a crash/denial behavior, but none of the provid...

CVE-2019-11638

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recfieldnameequalp at rec-field-name.c in librec.a, leading to a crash...

CVE-2019-11637

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

CVE-2019-11637

GNU recutils 1.8 contains a NULL pointer dereference in rec_rset_get_props (rec-rset.c in librec.a), leading to crashes. This CVE-2019-11637 issue is described consistently across multiple feeds (NVD, OSV, CNVD, CNVD-China, and related Nessus/OpenVAS entries). Connected documents confirm the affe...

CVE-2019-11637

An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

PT-2019-12442 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: An issue was discovered that leads to a crash due to a NULL pointer dereference in the function rec field name equal p at rec-field-name.c in librec.a. Recommendations: For GNU recutils version 1.8, at th...

PT-2019-12444 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: A heap-based buffer overflow issue exists in the function rec fex parse str simple at rec-fex.c in librec.a. Recommendations: For GNU recutils version 1.8, consider applying a patch or fix to address the...

PT-2019-12441 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU recutils version 1.8 Description: An issue was discovered that leads to a crash due to a NULL pointer dereference in the function rec rset get props at rec-rset.c in librec.a. Recommendations: For GNU recutils version 1.8, consider avoidi...

Fedora Update for kernel-tools FEDORA-2019-1b986880ea

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Amazon Linux AMI : wget (ALAS-2019-1194)

A buffer overflow vulnerability was found in GNU Wget. An attacker may be able to cause a denial-of-service DoS or may execute an arbitrary code. CVE-2019-5953 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security...

Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to a Publicly disclosed vulnerability from GNU glibc (CVE-2018-11237)

Summary GLIBC as used by IBM QRadar Network Packet Capture is vulnerable to a buffer overflow Vulnerability Details CVEID: CVE-2018-11237 Description: GNU glibc is vulnerable to a buffer overflow, caused by improper bounds of checking by the mempcpy function. By sending a specially-crafted reques...

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in GNU glibc (CVE-2018-11236)

Summary IBM Advanced Management Module AMM has addressed the following vulnerability in GNU glibc. Vulnerability Details CVEID: CVE-2018-11236 DESCRIPTION: GNU glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds of checking by the pathname arguments in the realpath...

Important: wget

Issue Overview: A buffer overflow vulnerability was found in GNU Wget. An attacker may be able to cause a denial-of-service DoS or may execute an arbitrary code. CVE-2019-5953 Affected Packages: wget Issue Correction: Run yum update wget or yum update --advisory ALAS-2019-1194 to update your...