CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

CVE-2020-28928

The CVE-2020-28928 entry concerns musl libc up to version 1.2.1. The root cause is a mishandling in wcsnrtombs of destination buffer size when applying a source character limit, which can lead to an invalid write (buffer overflow) or an infinite loop depending on input, as documented in multiple ...

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

musl libc buffer error vulnerability

musl libc is musl open source an open source C language standard library . Mainly used for embedded systems and mobile devices and so on. A buffer error vulnerability exists in musl libc version 1.2.1 and earlier versions, which stems from wcsnrtombs incorrectly handling a specific combination of...

Ubuntu 20.10 : c-ares vulnerability (USN-4638-1)

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4638-1 advisory. c-ares could be made to denial of service if it received a specially crafted DNS request. Tenable has extracted the preceding description block directly from the Ubun...

PT-2020-6698 · Musl Libc +3 · Musl Libc +3

Name of the Vulnerable Software and Affected Versions: musl libc versions 1.2.1 and earlier Description: The issue is related to the wcsnrtombs function in musl libc, which mishandles certain combinations of destination buffer size and source character limit. This can lead to an invalid write...

glibc: use-after-free in glob() function when expanding ~user

A use-after-free vulnerability was found in glibc in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processe...

sploitfun-linux-x86-exp-tut-zh

This is a Linux x86 exploit development tutorial series. The series covers various topics such as buffer overflow, integer overflow, off-by-one vulnerability, return-to-libc, and ASLR bypass. The tutorials are written in Chinese and translated into English. The series includes chapters on: 1...

EulerOS Virtualization for ARM 64 3.0.2.0 : glibc (EulerOS-SA-2020-1956)

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write vulnerability was found in glibc when handling signal trampolines on PowerPC. The backtrace...

Exploit for Incorrect Calculation in Google Android

...

In the GNU C Library (aka glibc or libc6) through 2.28 attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

...

ctf-pwns

This repository contains a collection of CTF Capture The Flag challenges for training and education. The challenges are categorized into several folders, each containing a specific challenge. The challenges are designed to test various skills, including exploitation, reverse engineering, and...

FreeBSD-SA-20:18.posix_spawnp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:18.posixspawnp Security Advisory The FreeBSD Project Topic: posixspawnp3 buffer overflow Category: core Module: libc Announced: 2020-07-08 Credits: Andrew...

Security update for axel (moderate)

openSUSE Security Update: Security update for axel Announcement ID: openSUSE-SU-2020:0778-1 Rating: moderate References: 1172159 Cross-References: CVE-2020-13614 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for axel fixes...

RHEL 8 : glibc (RHSA-2020:1828)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1828 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache...

CVE-2020-6096

A signed comparison vulnerability was found in GNU libc in the ARMv7 implementation of memcpy. The flaw affects the third argument to memcpy that specifies the number of bytes to copy. An underflow on the third argument could lead to undefined behavior such as out-of-bounds memory write and...

Red Hat newlib libc library code issue vulnerability (CNVD-2020-19538)

Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...

Red Hat newlib libc library code issue vulnerability (CNVD-2020-19541)

Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...

Red Hat newlib libc library code issue vulnerability

Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...