Lucene search
+L

20354 matches found

Positive Technologies
Positive Technologies
•added 2025/07/26 12:00 a.m.•2 views

PT-2025-55131

Уязвимость функции extract file архиватора GNU Tar связана с чтением за допустимыми границами буфера данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

2.6CVSS5.8AI score
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
•added 2025/07/25 12:51 p.m.•37 views

Security Bulletin: The iconv() function in the GNU C Library affects IBM Data Observability by Databand Self-Hosted (CVE-2024-2961)

Summary The vulnerability regarding iconv function in the GNU C Library versions 2.39 and older was addressed in IBM Data Observability by Databand Self-Hosted. Vulnerability Details CVEID:CVE-2024-2961 DESCRIPTION: The iconv function in the GNU C Library versions 2.39 and older may overflow the...

7.3CVSS7AI score0.8833EPSS
SaveExploits19Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/07/25 12:00 a.m.•10 views

NewStart CGSL MAIN 7.02 : patch Multiple Vulnerabilities (NS-SA-2025-0205)

The remote NewStart CGSL host, running version MAIN 7.02, has patch packages installed that are affected by multiple vulnerabilities: - GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload...

9.3CVSS6.8AI score0.08359EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2025/07/24 11:24 p.m.•13 views

SUSE CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

6.6CVSS7.2AI score0.00208EPSS
SaveExploits0References10
osv_azl
osv_azl
•added 2025/07/23 8:15 p.m.•16 views

AZL-68609 CVE-2025-8058 affecting package glibc for versions less than 2.38-15

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.8AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/23 8:15 p.m.•12 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS0.00208EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/07/23 8:15 p.m.•12 views

DEBIAN-CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.7AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/23 7:57 p.m.•44 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS0.00208EPSS
SaveExploits0References2
CVE
CVE
•added 2025/07/23 7:57 p.m.•168 views

CVE-2025-8058

The CVE-2025-8058 issue concerns the regcomp implementation in the GNU C Library (glibc) from versions 2.4 through 2.41. A double-free can occur when a prior allocation fails (including malloc failures or injected failures via interposed malloc), potentially enabling buffer manipulation depending...

5.9CVSS6.4AI score0.00208EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/07/23 7:57 p.m.•14 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.3AI score0.00208EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2025/07/23 7:57 p.m.•18 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.7AI score0.00208EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/07/23 7:57 p.m.•14 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.4AI score0.00208EPSS
SaveExploits0References2
Mend
Mend
•added 2025/07/23 7:57 p.m.•3 views

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

6.6CVSS0.00208EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/23 12:00 a.m.•3 views

CVE-2025-8058: Double Free

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation...

5.9CVSS6.2AI score0.00208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/23 12:00 a.m.•16 views

PT-2025-30618

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.4 through 2.41 Description The regcomp function is subject to a double free if a previous allocation fails. This can occur due to a malloc failure or through the use of an interposed malloc that introduces allocation...

8.4CVSS6.6AI score0.00618EPSS
SaveExploits1References68
Amazon
Amazon
•added 2025/07/22 12:00 a.m.•26 views

Important: gimp

Issue Overview: A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSD file, possibly enabling the execution of unauthorized code within the GIMP process. CVE-2023-44442...

7.8CVSS7.4AI score0.61167EPSS
SaveExploits0
Redos
Redos
•added 2025/07/21 12:00 a.m.•17 views

ROS-20250721-02

A vulnerability in the assert function of the GNU C Library system library is related to incorrect calculations of the the size of the allocated buffer. Exploitation of the vulnerability could allow an attacker acting remotely, affect the availability of protected information...

6.2CVSS6.5AI score0.00356EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/07/21 12:00 a.m.•8 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1818)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00593EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2025/07/18 11:08 a.m.•16 views

OESA-2025-1853 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the functi...

5.5CVSS7.2AI score0.00614EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2025/07/18 11:08 a.m.•15 views

OESA-2025-1852 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the functi...

5.5CVSS7.2AI score0.00614EPSS
SaveExploits1References2
Rows per page
Query Builder