Lucene search
+L

500 matches found

OpenVAS
OpenVAS
added 2022/04/13 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03293EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.14 views

PT-2024-2991

The software that is vulnerable is the GNU C Library glibc versions 2.39 and older, specifically the iconv function when converting strings to the ISO-2022-CN-EXT character set. This vulnerability can be exploited through PHP-based web applications. The vulnerability is a buffer overflow in the...

9CVSS9AI score0.8833EPSS
SaveExploits18References231
OSV
OSV
added 2022/03/07 11:04 a.m.13 views

OESA-2022-1556 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.1CVSS7.4AI score0.04332EPSS
SaveExploits4References5
OpenVAS
OpenVAS
added 2022/03/02 12:00 a.m.17 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1267)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03293EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/02/26 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1240)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03293EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.12 views

The vulnerability of the iconv utility in the GNU C Library (glibc) system library involves a program entering an infinite loop, allowing an attacker to cause a service failure.

The vulnerability of the iconv utility in the GNU C Library glibc is related to it entering an infinite loop. Exploiting this vulnerability can allow an attacker to perform a denial-of-service attack...

3.3CVSS6.6AI score0.00887EPSS
SaveExploits1References15Affected Software6
OSV
OSV
added 2021/11/19 11:04 a.m.7 views

OESA-2021-1438 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

7.5CVSS7AI score0.03293EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/11/08 12:00 a.m.38 views

GNU C Library has unspecified vulnerabilities

The GNU C Library glibc, libc6 is an open source, free C compiler released under the LGPL license. version 2.34 of the GNU C Library aka glibc contains a security vulnerability that stems from a data validation issue in the affected version of the library, iconvdata/iso-2022-jp-3.c's iconv in the...

7.5CVSS4.1AI score0.03293EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/04 8:15 p.m.6 views

DEBIAN-CVE-2021-43396

In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...

7.5CVSS8.2AI score0.03293EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/04 8:15 p.m.8 views

AZL-6443 CVE-2021-43396 affecting package glibc for versions less than 2.35-1

In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...

7.5CVSS7.2AI score0.03293EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/11/04 8:15 p.m.5 views

CVE-2021-43396

In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...

7.5CVSS7.2AI score0.03293EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2021/11/04 7:52 p.m.31 views

CVE-2021-43396

In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...

7.7AI score0.03293EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2021/11/04 7:52 p.m.32 views

CVE-2021-43396

In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv use cases. NOTE: the vendor states "t...

7.5CVSS8.5AI score0.03293EPSS
SaveExploits1
CVE
CVE
added 2021/11/04 7:52 p.m.153 views

CVE-2021-43396

CVE-2021-43396 affects the GNU C Library (glibc) iconv implementation, specifically iconvdata/iso-2022-jp-3.c in glibc 2.34. The issue allows a crafted ISO-2022-JP-3 data sequence, paired with an internal state reset, to cause iconv() to emit a spurious '\0' character, with potential data-integri...

7.5CVSS7.2AI score0.03293EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/04 12:00 a.m.14 views

PT-2021-23827 · Gnu · Glibc

Name of the Vulnerable Software and Affected Versions: GNU C Library aka glibc version 2.34 Description: Remote attackers can force iconv to emit a spurious '0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv...

7.5CVSS8.1AI score0.03293EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2021/11/04 12:00 a.m.7 views

GNU C Library 安全漏洞

The GNU C Library glibc, libc6 is an open source, free C compiler released under the LGPL license. version 2.34 of the GNU C Library aka glibc contains a security vulnerability that stems from a data validation issue in the affected version of the library, iconvdata/iso-2022-jp-3.c's iconv in the...

7.5CVSS8.3AI score0.03293EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:00 a.m.33 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : glibc Multiple Vulnerabilities (NS-SA-2021-0095)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has glibc packages installed that are affected by multiple vulnerabilities: - The posixspawnfileactionsaddopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allo...

7.5CVSS7AI score0.05757EPSS
SaveExploits5References13
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 1:31 a.m.72 views

Security Bulletin: GNU C Library (glibc) Vulnerability Affects Power Hardware Management Console (CVE-2015-0235, CVE-2014-6040, CVE-2014-7817)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects Power Hardware Management Console. Vulnerability Details CVEID: CVE-2015-0235 DESCRIPTION:The gethostbyname functions of the GNU C Library glibc are vulnerable to a buffer overflow. By sending a specially crafted...

10CVSS8.8AI score0.94558EPSS
SaveExploits30Affected Software1
Redos
Redos
added 2021/09/08 12:00 a.m.50 views

ROS-2-796

2.796 Vulnerability in GNU C Library glibc 2.32 CVE-2016-10228,CVE-2020-10029. 1. Vulnerability Description: CVE-2016-10228 Looping in iconv utility, manifested when run with "-c" option, in case of incorrect multibyte data processing. CVE-2020-10029 Stack corruption when trigonometric functions...

5.9CVSS7.5AI score0.04006EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:00 a.m.30 views

ROS-2-1166

2.1166 Vulnerability in GNU C Library glibc 2.32 CVE-2016-10228,CVE-2020-10029. 1. Vulnerability Description: CVE-2016-10228 Looping in iconv utility, manifested when run with "-c" option, in case of incorrect multibyte data processing. CVE-2020-10029 Stack corruption when trigonometric functions...

9.8CVSS7.5AI score0.04006EPSS
SaveExploits1
Rows per page
Query Builder