Lucene search
K

63 matches found

OSV
OSV
added 2020/05/18 5:42 a.m.4 views

SUSE-SU-2020:1298-1 Security update for libbsd

This update for libbsd fixes the following issues: - CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table bsc1160551...

9.1CVSS9.1AI score0.02805EPSS
Exploits1References3
Veracode
Veracode
added 2020/05/10 11:24 p.m.31 views

Arbitrary Code Execution

libbsd is vulnerable to arbitrary code execution. An off-by-one vulnerability which leads to a heap-based buffer overflow in the fgetwln function in libbsd allows attackers execute arbitrary code in the system...

9.8CVSS7.4AI score0.03223EPSS
Exploits0References11Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/02/05 12:0 a.m.37 views

USN-4243-1: libbsd vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affecte...

9.8CVSS9.9AI score0.03223EPSS
Exploits1Affected Software2
Mageia
Mageia
added 2020/01/28 7:52 a.m.28 views

Updated libbsd packages fix security vulnerability

It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table strtab in nlist.c. An attacker could possibly use this issue to access sensitive information CVE-2019-20367...

9.1CVSS1.5AI score0.02805EPSS
Exploits1References2
OSV
OSV
added 2020/01/28 7:52 a.m.3 views

MGASA-2020-0061 Updated libbsd packages fix security vulnerability

It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table strtab in nlist.c. An attacker could possibly use this issue to access sensitive information CVE-2019-20367...

9.1CVSS9AI score0.02805EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/01/21 12:0 a.m.32 views

Ubuntu 16.04 LTS / 18.04 LTS : libbsd vulnerabilities (USN-4243-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4243-1 advisory. It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This...

9.8CVSS8.7AI score0.03223EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2020/01/21 12:0 a.m.28 views

Ubuntu: Security Advisory (USN-4243-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03223EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2020/01/20 3:24 p.m.103 views

USN-4243-1: libbsd vulnerabilities

It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. CVE-2016-2090 It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this...

9.8CVSS8.4AI score0.03223EPSS
Exploits1
OSV
OSV
added 2020/01/20 3:24 p.m.0 views

USN-4243-1 libbsd vulnerabilities

It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. CVE-2016-2090 It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this...

9.8CVSS7.4AI score0.03223EPSS
Exploits1References3
CNVD
CNVD
added 2020/01/10 12:0 a.m.3 views

Libbsd Buffer Overflow Vulnerability

libbsd is a library that provides features commonly found in BSD systems. A buffer overflow vulnerability exists in the nlist.c file in versions of libbsd prior to 0.10.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

9.1CVSS8.9AI score0.02805EPSS
Exploits1References1
NVD
NVD
added 2020/01/08 5:15 p.m.20 views

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS9.1AI score0.02805EPSS
Exploits1References7
OSV
OSV
added 2020/01/08 5:15 p.m.2 views

ALPINE-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS6.9AI score0.02805EPSS
Exploits1References1
OSV
OSV
added 2020/01/08 5:15 p.m.23 views

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS6.6AI score
Exploits0References7
OSV
OSV
added 2020/01/08 5:15 p.m.1 views

DEBIAN-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS8.2AI score0.02805EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/01/08 5:15 p.m.29 views

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS7.1AI score0.02805EPSS
Exploits1References3
Prion
Prion
added 2020/01/08 5:15 p.m.18 views

Out-of-bounds

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

6.4CVSS8.9AI score0.02805EPSS
Exploits1References7Affected Software4
OSV
OSV
added 2020/01/08 5:15 p.m.3 views

UBUNTU-CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9.1CVSS7.2AI score0.02805EPSS
Exploits1References4
Cvelist
Cvelist
added 2020/01/08 4:50 p.m.22 views

CVE-2019-20367

nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab...

9AI score0.02805EPSS
Exploits1References7
CVE
CVE
added 2020/01/08 4:50 p.m.324 views

CVE-2019-20367

CVE-2019-20367 is a vulnerability in libbsd where the symbol-table handling in nlist.c can read beyond bounds when comparing a symbol name from the string table. Affected: libbsd before 0.10.0 (older releases). Root cause: out-of-bounds read (CWE-125) in nlist.c. Impact: potential crash or crash-...

9.1CVSS8.9AI score0.02805EPSS
Exploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:0 a.m.79 views

Debian DLA-2052-1 : libbsd security update

An issues has been found in libbsd, a package containing utility functions from BSD systems. In function fgetwln an off-by-one error could triggers a heap buffer overflow. For Debian 8 'Jessie', this problem has been fixed in version 0.7.0-2+deb8u1. We recommend that you upgrade your libbsd...

9.8CVSS8AI score0.03223EPSS
Exploits0References3
Rows per page
Query Builder