Lucene search
K

16966 matches found

Prion
Prion
added 2024/02/06 9:15 a.m.12 views

Null pointer dereference

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service...

1.7CVSS7.4AI score0.0049EPSS
Exploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2024/02/06 9:15 a.m.24 views

CVE-2024-0684

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service...

5.5CVSS6.1AI score0.0049EPSS
Exploits0References2
OSV
OSV
added 2024/02/06 9:15 a.m.1 views

UBUNTU-CVE-2024-0684

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service...

5.5CVSS6.1AI score0.0049EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/02/06 8:26 a.m.58 views

CVE-2024-0684

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service...

5.5CVSS5.4AI score0.0049EPSS
Exploits0
CVE
CVE
added 2024/02/06 8:26 a.m.125 views

CVE-2024-0684

CVE-2024-0684 affects GNU coreutils split. A heap overflow in line_bytes_split() can be triggered by user-controlled data of hundreds of bytes, potentially causing an application crash and denial of service. Affected: coreutils split in vulnerable versions prior to fixed release. Public details i...

5.5CVSS5.3AI score0.0049EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2024/02/06 8:26 a.m.24 views

CVE-2024-0684

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the linebytessplit function, potentially leading to an application crash and denial of service...

5.5CVSS5.4AI score0.0049EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/02/05 11:33 a.m.1 views

gimp: psp integer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process...

7.8CVSS6AI score0.93007EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2024/02/04 12:0 a.m.14 views

Fedora: Security Advisory for indent (FEDORA-2024-74667e499e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.6AI score0.00312EPSS
Exploits0References2
Fedora
Fedora
added 2024/02/02 2:23 a.m.26 views

[SECURITY] Fedora 38 Update: indent-2.2.13-5.fc38

Indent is a GNU program for beautifying C code, so that it is easier to read. Indent can also convert from one C writing style to a different one. Indent understands correct C syntax and tries to handle incorrect C syntax. Install the indent package if you are developing applications in C and you...

5.5CVSS7.2AI score0.00312EPSS
Exploits0
Fedora
Fedora
added 2024/02/02 1:15 a.m.21 views

[SECURITY] Fedora 39 Update: indent-2.2.13-6.fc39

Indent is a GNU program for beautifying C code, so that it is easier to read. Indent can also convert from one C writing style to a different one. Indent understands correct C syntax and tries to handle incorrect C syntax. Install the indent package if you are developing applications in C and you...

5.5CVSS7.2AI score0.00312EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/02/02 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-6620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.9AI score0.04794EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2024/02/02 12:0 a.m.32 views

Fedora: Security Advisory (FEDORA-2024-bfd13103eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00312EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/02/02 12:0 a.m.38 views

GLSA-202402-01 : glibc: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-01 glibc: Multiple Vulnerabilities - A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. CVE-2023-5156 - A heap-based...

8.4CVSS7AI score0.04794EPSS
Exploits9References7
Ubuntu
Ubuntu
added 2024/02/01 12:41 p.m.46 views

USN-6620-1: GNU C Library vulnerabilities

It was discovered that the GNU C Library incorrectly handled the syslog function call. A local attacker could use this issue to execute arbitrary code and possibly escalate privileges...

8.4CVSS7.1AI score0.04794EPSS
Exploits9
OSV
OSV
added 2024/02/01 12:41 p.m.4 views

USN-6620-1 glibc vulnerabilities

It was discovered that the GNU C Library incorrectly handled the syslog function call. A local attacker could use this issue to execute arbitrary code and possibly escalate privileges...

8.4CVSS7.2AI score0.04794EPSS
Exploits9References4
SUSE CVE
SUSE CVE
added 2024/02/01 12:22 a.m.3 views

SUSE CVE-2023-6779

An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...

7.4CVSS7.7AI score0.03127EPSS
Exploits2References3
SUSE CVE
SUSE CVE
added 2024/02/01 12:22 a.m.1 views

SUSE CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

7.4CVSS7.8AI score0.02689EPSS
Exploits2References3
ATTACKERKB
ATTACKERKB
added 2024/01/31 2:15 p.m.1 views

CVE-2023-6779

An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...

8.4CVSS6AI score0.04794EPSS
Exploits8References11
ATTACKERKB
ATTACKERKB
added 2024/01/31 2:15 p.m.0 views

CVE-2023-6246

A heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name the basename of...

8.4CVSS6AI score0.04794EPSS
Exploits7References13
ATTACKERKB
ATTACKERKB
added 2024/01/31 2:15 p.m.1 views

CVE-2023-6780

An integer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message,...

8.4CVSS6AI score0.04794EPSS
Exploits8References10
Rows per page
Query Builder