Security Bulletin: Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc (CVE-2020-1751)

Summary Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc CVE-2020-1751 Vulnerability Details CVEID:CVE-2020-1751 DESCRIPTION: GNU glibc could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds write when handling signal...

GNU Inetutils Elevation of Privilege Vulnerability

GNU Inetutils is a collection of network tools from the GNU Project that contains common network management programs such as traceroute, hostname, ifconfig, and others. The toolset is mainly used for functions such as network diagnostics, configuration and system information query. An elevation o...

SUSE CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

AZL-45015 CVE-2023-40305 affecting package indent for versions less than 2.2.13-1

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

DEBIAN-CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

Heap overflow

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

UBUNTU-CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

Privilege escalation

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

UBUNTU-CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

CVE-2023-40303

CVE-2023-40303 relates to inetutils, where multiple set*id() return values were not checked in ftpd, rcp, rlogin, rsh, rshd, and uucpd, enabling potential local privilege escalation. Affected software: GNU inetutils (various Unix/Linux distros). Impact: privilege escalation if setuid/setgid/seteu...

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

GNU indent buffer error vulnerability

GNU indent is a utility program of the GNU community that has existed since the Unix era. It can be reindented into C and C++ code in a user-defined programming style. A security vulnerability exists in GNU indent version 2.2.13, which is caused by a buffer overflow vulnerability in searchbrace...

CVE-2023-40305

CVE-2023-40305 affects GNU indent 2.2.13 with a heap-based overflow in search_brace inside indent.c triggered by a crafted file. The reachable impact is availability loss (per CVSS 3.1: A=High) with local attack vector and required user interaction. Supported details indicate the vulnerability ex...

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...