RHEL 6 : glibc (RHSA-2016:0175)

Updated glibc packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)

漏洞概要 Glibc是GNU发布的LIBC库的C运行库，Glibc是Linux系统中最底层的API，基本其它任何运行库都会依赖于Glibc。Glibc除了封装Linux操作系统所提供的系统服务外，还提供了其它的必要服务的实现。由于 Glibc 几乎包含所有的 UNIX 通行的标准，可以说是操作系统重要支撑库。 Glibc中的 DNS...

Critical: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Vulnerabilities of operating systems Mac OS X and iOS, allowing attackers to execute arbitrary code

The vulnerability of the libc component in Mac OS X and iOS systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted package...

Apache 2.4.7 + PHP 7.0.2 - openssl_seal() Uninitialized Memory Code Execution

Apache 2.4.7 + PHP 7.0.2 - opensslseal Uninitialized Memory Code Execution ?php // Source: http://akat1.pl/?id=1 function getmaps $fh = fopen"/proc/self/maps", "r"; $maps = fread$fh, 331337; fclose$fh; return explode"\n", $maps; function findmap$sym $addr = 0; foreachgetmaps as $record if...

The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.

The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...

Unspecified Vulnerability in Solaris Libc Library Component

Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris Libc Library component could allow an attacker to launch a denial-of-service attack or unauthorized modification of some data...

CVE-2016-0406

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

CVE-2016-0406

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

CVE-2016-0406

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

CVE-2016-0406

CVE-2016-0406 affects Oracle Solaris 11, specifically the Libc Library component. The connected sources indicate an unspecified vulnerability in Solaris Libc that could allow local users to impact integrity and availability. The CNVD/NVD entries consistently name Solaris Libc as the affected subc...

CVE-2016-0406: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

UBUNTU-CVE-2015-8982

Integer overflow in the strxfrm function in the GNU C Library aka glibc or libc6 before 2.21 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow...

Apple OS X libc buffer overflow arbitrary code execution vulnerability (CNVD-2015-08154)

Apple OS X is an operating system developed by Apple Inc. A buffer overflow vulnerability exists in Apple OS X libc, which allows attackers to construct a special package that can be tricked into loading by the target user, which can execute arbitrary code...

Apple OS X libc buffer overflow arbitrary code execution vulnerability

Apple OS X is an operating system developed by Apple Inc. A buffer overflow vulnerability exists in Apple OS X libc, which allows attackers to construct a special package that can be tricked into loading by the target user, which can execute arbitrary code...

CVE-2015-7038

Based on connected documents, CVE-2015-7038 is a buffer overflow in Apple’s libc affecting iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is a libc buffer overflow that allows remote code execution via a crafted package. No specific patch/versio...

CVE-2015-7038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039...

CVE-2015-7039: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7038...

Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...