Lucene search
+L

20755 matches found

CVE
CVE
•added 2021/01/04 12:00 a.m.•672 views

CVE-2019-25013

CVE-2019-25013 affects the GNU C Library (glibc) iconv, where processing invalid multi-byte input in EUC-KR can cause a buffer over-read. Connected advisories confirm the issue and map it to glibc versions affected (through 2.32) and note that Debian, AlmaLinux/Alma or Amazon Linux advisories add...

7.1CVSS7AI score0.03565EPSS
SaveExploits0References19Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/04 12:00 a.m.•8 views

CVE-2019-25013: Out-of-bounds Read

The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read...

7.1CVSS6.8AI score0.03565EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2020/12/30 12:00 a.m.•24 views

Linbit csync2: Input validation error vulnerability

Linbit csync2 is a cluster synchronization tool from Austrian company Linbit, which is mainly used to keep files on multiple hosts in a cluster synchronized. A security vulnerability exists in LINBIT csync2 version 2.0 and earlier versions, which stems from a failure to properly check the return...

5.3CVSS5.8AI score0.01326EPSS
SaveExploits0References6
CNVD
CNVD
•added 2020/12/28 12:00 a.m.•12 views

GNU Binutils Heap Buffer Overflow Vulnerability (CNVD-2021-01283)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A heap buffer overflow vulnerability exists in bfdgetlsigned32 in libbfd.c in the Binary File Descriptor BFD library used in GNU Binutils 2.35.1. T...

4.3CVSS8.9AI score0.01238EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/12/27 4:15 a.m.•54 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

3.3CVSS6.7AI score
SaveExploits0References4
osv_alpine
osv_alpine
•added 2020/12/27 4:15 a.m.•1 views

ALPINE-CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

3.3CVSS0.01238EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2020/12/27 4:15 a.m.•14 views

DEBIAN-CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

3.3CVSS6.7AI score0.01238EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/27 4:15 a.m.•29 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.3CVSS5.5AI score0.01238EPSS
SaveExploits1References4
Prion
Prion
•added 2020/12/27 4:15 a.m.•36 views

Heap overflow

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.3CVSS5.3AI score0.01238EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2020/12/27 3:38 a.m.•60 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.3CVSS6.7AI score0.01238EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/12/27 3:38 a.m.•60 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

5.2AI score0.01238EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2020/12/27 3:38 a.m.•55 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.3CVSS5.5AI score0.01238EPSS
SaveExploits1
Mend
Mend
•added 2020/12/27 3:38 a.m.•5 views

CVE-2020-35448

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.8CVSS0.01238EPSS
SaveExploits1References8
CVE
CVE
•added 2020/12/27 3:38 a.m.•276 views

CVE-2020-35448

CVE-2020-35448 affects GNU Binutils’ libbfd in CP4S (Binary File Descriptor) integration. The issue is a heap-based buffer over-read in bfd_getl_signed_32 in libbfd.c caused by lack of validation of sh_entsize in _bfd_elf_slurp_secondary_reloc_section() in elf.c, which can crash the application (...

4.3CVSS5.1AI score0.01238EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/27 12:00 a.m.•6 views

CVE-2020-35448: Out-of-bounds Read

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

4.3CVSS6AI score0.01238EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
•added 2020/12/16 5:49 p.m.•94 views

Security Bulletin: A GNU glibc vulnerability affects IBM Watson Text to Speech and Speech to Text (IBM Watson Speech Services for Cloud Pak for Data 1.2)

Summary A GNU glibc vulnerability, listed below, affects IBM Watson Text to Speech and Speech to Text IBM Watson Speech Services for Cloud Pak for Data 1.2 Vulnerability Details CVEID: CVE-2020-1752 DESCRIPTION: GNU glibc could allow a local attacker to execute arbitrary code on the system, cause...

7CVSS1.3AI score0.00549EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2020/12/16 5:44 p.m.•69 views

Security Bulletin: A GNU C Library vulnerability affects IBM Watson Text to Speech and Speech to Text (IBM Watson Speech Services for Cloud Pak for Data 1.2)

Summary A GNU C Library vulnerability, listed below, affect IBM Watson Text to Speech and Speech to Text IBM Watson Speech Services for Cloud Pak for Data 1.2 Vulnerability Details CVEID: CVE-2020-10029 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a denial of service, caused by ...

5.5CVSS0.4AI score0.00764EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/12/15 12:00 a.m.•34 views

Virtuozzo 7 : wget (VZLSA-2019-1228)

An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS8AI score0.05862EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/12/11 12:57 p.m.•40 views

CVE-2020-16590

A double free vulnerability exists in the Binary File Descriptor BFD aka libbrd in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file...

5.5CVSS3.1AI score0.00954EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2020/12/11 11:58 a.m.•43 views

CVE-2020-16591

A Denial of Service vulnerability exists in the Binary File Descriptor BFD in GNU Binutils 2.35 due to an invalid read in processsymboltable, as demonstrated in readeif...

5.5CVSS2.9AI score0.00894EPSS
SaveExploits1References5
Rows per page
Query Builder