Lucene search
+L

20419 matches found

RedhatCVE
RedhatCVE
•added 2025/01/22 11:27 p.m.•26 views

CVE-2025-0395

A flaw was found in the GNU C Library glibc. A buffer overflow condition via the assert function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading t...

5.5CVSS6.5AI score0.00356EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2025/01/22 1:15 p.m.•7 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.5CVSS5.7AI score0.00356EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/01/22 1:15 p.m.•20 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS0.00356EPSS
SaveExploits0References12
osv_azl
osv_azl
•added 2025/01/22 1:15 p.m.•18 views

AZL-55937 CVE-2025-0395 affecting package glibc for versions less than 2.35-9

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.1AI score0.00356EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/01/22 1:15 p.m.•20 views

AZL-55965 CVE-2025-0395 affecting package glibc for versions less than 2.38-11

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.9AI score0.00356EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/01/22 1:15 p.m.•36 views

UBUNTU-CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7AI score0.00356EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/01/22 1:11 p.m.•54 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

0.00356EPSS
SaveExploits0References4
Mend
Mend
•added 2025/01/22 1:11 p.m.•7 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.9CVSS0.00356EPSS
SaveExploits0References14
CVE
CVE
•added 2025/01/22 1:11 p.m.•853 views

CVE-2025-0395

The GNU C Library (glibc) (versions 2.13 to 2.40) contains a vulnerability where the assert() function fails to allocate sufficient space for assertion failure message strings and size information. This flaw can lead to a buffer overflow if the message string size aligns with the page size. Affec...

6.2CVSS6.9AI score0.00356EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2025/01/22 1:11 p.m.•21 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.8AI score0.00356EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/01/22 1:11 p.m.•9 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

7.6AI score0.00356EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/01/22 1:11 p.m.•21 views

CVE-2025-0395

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS7.2AI score
SaveExploits0References14
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•16 views

GNU C Library security vulnerabilities

The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that stems from not allocating enough space for assertion failure message strings and size information when the assert...

7.5CVSS6.7AI score0.00356EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•3 views

CVE-2025-0395: Incorrect Calculation of Buffer Size

When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size...

6.2CVSS6.1AI score0.00356EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/21 9:15 p.m.•17 views

CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

5.5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/21 12:00 a.m.•14 views

CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

7.6AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/21 12:00 a.m.•133 views

CVE-2024-57360

The GNU Binutils package, specifically version 2.43 and above, contains an Incorrect Access Control vulnerability in the nm --without-symbol-version function. This flaw allows for local exploitation , potentially leading to significant availability impact. While several OS distributions like Eule...

5.5CVSS7AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/20 12:00 a.m.•13 views

PT-2025-6045

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A memory leak issue was found in the link order scan function of the ld component, specifically in the file ld/ldelfgen.c. This issue can be exploited remotely, but the complexity of an attack is rather...

7.8CVSS4.3AI score0.00636EPSS
SaveExploits7References105
osv_oesa
osv_oesa
•added 2025/01/17 11:08 a.m.•15 views

OESA-2025-1042 gcc security update

The gcc package contains the GNU Compiler Collection version 12. You'll need this package in order to compile C code. Security Fixes: DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in...

4.8CVSS7AI score0.01036EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•14 views

PT-2025-6044

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A problem has been found in the function sanitizer::internal strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launche...

7.8CVSS4.9AI score0.00671EPSS
SaveExploits3References107
Rows per page
Query Builder