1047 matches found
CVE-2022-1922
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...
GHSA-WGRG-5H56-JG27 Out-of-bounds write in nix::unistd::getgrouplist
On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption. The libc getgrouplist functi...
Out-of-bounds write in nix::unistd::getgrouplist
On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption. The libc getgrouplist functi...
Linux Malware Deemed ‘Nearly Impossible’ to Detect
A new Linux malware that’s “nearly impossible to detect” can harvest credentials and gives attackers remote access and rootkit functionality by acting in a parasitic way to infect targets, researchers said. Researchers from The BlackBerry Research and Intelligence Team have been tracking the...
Use After Free in op_is_set_bp
Description Heap use after free in opissetbp function. ASAN report： ================================================================= ==2367298==ERROR: AddressSanitizer: heap-use-after-free on address 0x6060000481a0 at pc 0x7f580c10da41 bp 0x7ffd53a17ed0 sp 0x7ffd53a17ec0 READ of size 8 at...
glibc security update
An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Exploit Root exploit for the PwnKit vulnerabili...
CVE-2021-46487
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
Moddable SDK 缓冲区错误漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. Moddable SDK in v11.5.0 is vulnerable to a heap buffer overflow vulnerability stemming from a boundary error in component libcstartmain when handling untrusted input. A remote attacker could...
Out-of-bounds Write in nix
On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption. The libc getgrouplist functi...
GHSA-76W9-P8MG-J927 Out-of-bounds Write in nix
On certain platforms, if a user has more than 16 groups, the nix::unistd::getgrouplist function will call the libc getgrouplist function with a length parameter greater than the size of the buffer it provides, resulting in an out-of-bounds write and memory corruption. The libc getgrouplist functi...
PHP 5.3.x <= 5.3.10 'libc/regcomp' Multiple Vulnerabilities - BSD
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
CVE-2021-29860
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...
AIX (IJ35673)
The version of AIX installed on the remote host is prior to APAR IJ35673. It is, therefore, affected by a vulnerability as referenced in the IJ35673 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose...
AIX (IJ33560)
The version of AIX installed on the remote host is prior to APAR IJ33560. It is, therefore, affected by a vulnerability as referenced in the IJ33560 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose...
AIX (IJ34081)
The version of AIX installed on the remote host is prior to APAR IJ34081. It is, therefore, affected by a vulnerability as referenced in the IJ34081 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose...
Vulnerability in libc affects AIX
IBM SECURITY ADVISORY First Issued: Tue Nov 16 13:38:36 CST 2021 |Updated: Fri Mar 17 15:26:09 CDT 2023 |Update: Corrected the affected upper fileset levels for AIX 7.1 TL5 | to show that SP11 is affected. Added iFix for 7.1 TL5 SP11. The most recent version of this document is available here:...