Lucene search
+L

17553 matches found

Veracode
Veracode
added 2019/01/15 8:56 a.m.39 views

Remote Code Execution (RCE)

glibc is vulnerable to remote code execution RCE attacks. The vulnerability exists through multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial o...

4.6CVSS8.1AI score0.00993EPSS
SaveExploits1References24Affected Software1
Veracode
Veracode
added 2019/01/15 8:52 a.m.39 views

Denial Of Service (DoS)

openipmi is vulnerable to denial of service DoS attacks. The vulnerability exists as ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid...

3.6CVSS5.7AI score0.00425EPSS
SaveExploits0References22Affected Software2
Prion
Prion
added 2019/01/15 12:29 a.m.22 views

Heap overflow

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

4.3CVSS6.3AI score0.02685EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/01/15 12:29 a.m.26 views

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

6.5CVSS6.9AI score0.02685EPSS
SaveExploits1References1
OSV
OSV
added 2019/01/15 12:29 a.m.33 views

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

6.5CVSS6.7AI score
SaveExploits0References4
NVD
NVD
added 2019/01/15 12:29 a.m.20 views

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

6.5CVSS6.5AI score0.02685EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2019/01/15 12:00 a.m.50 views

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

6.5CVSS6.5AI score0.02685EPSS
SaveExploits1
CVE
CVE
added 2019/01/15 12:00 a.m.103 views

CVE-2018-20712

CVE-2018-20712 : A heap-based buffer over-read in d_expression_1 (cp-demangle.c) of GNU libiberty, distributed with GNU Binutils 2.31.1, can cause segmentation faults and denial-of-service as shown by c++filt. Connected sources confirm the same flaw and tie it to GNU Binutils components used by b...

6.5CVSS6.3AI score0.02685EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/01/15 12:00 a.m.44 views

CVE-2018-20712

A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt...

6.5AI score0.02685EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2019/01/12 12:00 a.m.72 views

Schneider Electric U.motion Builder Software Detection (HTTP)

HTTP based detection of Schneider Electric U.motion Builder Software. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7AI score
SaveExploits0References1
OSV
OSV
added 2019/01/11 9:07 p.m.18 views

MGASA-2019-0034 GNU tar has been updated to fix CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS4.6AI score0.00526EPSS
SaveExploits1References3
Mageia
Mageia
added 2019/01/11 9:07 p.m.46 views

GNU tar has been updated to fix CVE-2018-20482

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...

4.7CVSS3.6AI score0.00526EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/01/10 12:00 a.m.272 views

Amazon Linux 2 : binutils (ALAS-2019-1138)

An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version 2.30. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information.CVE-2018-7568 The ignoresectionsym function in elf.c in the Binary Fi...

7.8CVSS6.9AI score0.05834EPSS
SaveExploits9References10
CNVD
CNVD
added 2019/01/07 12:00 a.m.8 views

GNU Binutils integer overflow vulnerability (CNVD-2019-00566)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. An integer overflow vulnerability in t...

5.5CVSS8.8AI score0.01973EPSS
SaveExploits1References1
Amazon
Amazon
added 2019/01/07 12:00 a.m.70 views

Low: binutils

Issue Overview: An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version 2.30. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information.CVE-2018-7568 The ignoresectionsym function in elf.c ...

7.8CVSS8.1AI score0.05834EPSS
SaveExploits9
OSV
OSV
added 2019/01/04 6:29 p.m.9 views

UBUNTU-CVE-2018-20673

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability for "Create an array for saving the template argument values" that can trigger a heap-based buffer overflow, as demonstrated by nm...

5.5CVSS7AI score0.01637EPSS
SaveExploits1References2
NVD
NVD
added 2019/01/04 6:29 p.m.35 views

CVE-2018-20673

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability for "Create an array for saving the template argument values" that can trigger a heap-based buffer overflow, as demonstrated by nm...

5.5CVSS6.5AI score0.01637EPSS
SaveExploits1References2
Prion
Prion
added 2019/01/04 6:29 p.m.26 views

Integer overflow

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability for "Create an array for saving the template argument values" that can trigger a heap-based buffer overflow, as demonstrated by nm...

4.3CVSS7.3AI score0.01637EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/01/04 6:29 p.m.27 views

CVE-2018-20673

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability for "Create an array for saving the template argument values" that can trigger a heap-based buffer overflow, as demonstrated by nm...

5.5CVSS6.6AI score0.01637EPSS
SaveExploits1References1
OSV
OSV
added 2019/01/04 6:29 p.m.29 views

CVE-2018-20673

The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability for "Create an array for saving the template argument values" that can trigger a heap-based buffer overflow, as demonstrated by nm...

5.5CVSS7AI score
SaveExploits0References2
Rows per page
Query Builder