1047 matches found
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...
CVE-2016-8859
CVE-2016-8859 affects TRE and musl libc. The TRE library experienced multiple integer overflows in its regex/memory-handling paths, enabling memory corruption and an out-of-bounds write when processing large numbers of states or tags. Public advisories document this issue across multiple distribu...
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...
Integer overflow
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...
unsorted bin attack analysis-vulnerability warning-the black bar safety net
One, Foreword This is before that article overflow using the FILE structure of the follow-up article, mentioned earlier is for the Shanghai network security contest pwn450 of technology to write articles, a total of two techniques, one is the overflow using the FILE structure of the body, one is...
By means of DynELF achieved without libc exploit summary-vulnerability warning-the black bar safety net
In the absence of the target system libc file of the case, we can use pwntools the DynELF module to leak address information, thereby acquiring to shell. This article for linux puts and write, respectively, shows the implementation of the DynELF key function of the leak method, and by a 3-CTF top...
FreeBSD / Apple libc link_ntoa() buffer overflow Exploit
Exploit for multiple platform in category remote exploits Improper bounds checking of the obuf variable in the linkntoa function in linkaddr.c may allow an attacker to read or write from memory. The routine linkaddr interprets character strings representing link-level addresses, returning binary...
Buffer Overflow in BSD libc Library Patched
The BSD libc library was updated recently to address a buffer overflow vulnerability that could have allowed an attacker to execute arbitrary code. The library is part of the POSIX library, which is used in BSD operating systems, like FreeBSD, NetBSD, OpenBSD. The libc library is also used in...
BSD libc contains a buffer overflow vulnerability in link_ntoa()
Overview The BSD libc library's linkntoa function may be vulnerable to a classic buffer overflow. It is currently unclear if this issue is exploitable. Description CWE-120: Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' - CVE-2016-6559Improper bounds checking of the obuf...
FreeBSD-SA-16:37.libc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:37.libc Security Advisory The FreeBSD Project Topic: linkntoa3 buffer overflow Category: core Module: libc Announced: 2016-12-06, revised on 2016-12-08...
musl libc 'tre_tnfa_run_parallel()' function integer overflow vulnerability
musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. An integer overflow vulnerability exists in the musl libc 'tretnfarunparallel' function. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A...
Internet Bug Bounty: LZMADecompressor.decompress Use After Free
I have submitted a vulnerability that has now been fixed. The report includes a proof of concept that demonstrates code execution. The submitted patch was accepted with minor changes. https://bugs.python.org/issue28275 --- Python 3.5.2 suffers from a use after free vulnerability caused by the...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the libc++abi component in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context remotely, or to cause a service failure memory corruption through a specially created...
Glibc DNS Resolver Vulnerability
A vulnerability in the GNU libc glibc DNS resolver allows remote code execution CVE-2015-7547. However, this issue can be exploited only from a DNS server that is under the control of an attacker. Ref 91886. This glibc issue is only exploitable by an attacker controlling the DNS server configured...
[SECURITY] Fedora 23 Update: dietlibc-0.33-8.fc23
The diet libc is a libc that is optimized for small size. It can be used to create small statically linked binaries for Linux on alpha, arm, hppa, ia64, i386, mips, s390, sparc, sparc64, ppc and x8664...
Apple OS X libc++abi Component Arbitrary Code Execution Vulnerability
Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in the Apple OS X libc++abi component, which can be exploited by remote attackers to crash an application or execute arbitrary code...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...
