878 matches found
Fedora 26 : glibc (2018-8e27ad96ed)
This update addresses two security vulnerabilities : - CVE-2017-15670, CVE-2017-15671, CVE-2017-15804: Various vulnerabilities could lead to memory corruption in the glob and glob64 function. RHBZ1505298, RHBZ1504807 - CVE-2017-16997: Check for empty tokens before dynamic string token expansion i...
Fedora 27 : glibc (2017-828f8a8fc6)
This update addresses RHBZ1468837, which caused bash to lack job control in mock chroots. Note that glibc inside the chroot needs to be upgraded for the fix to be effective. In additon, two dynamic linker issues where fixed which are not security bugs, but received CVE IDs nevertheless RHBZ152486...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
Remote code execution
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2017:3170-1)
GNU binutil was updated to the 2.29.1 release, bringing various new features, fixing a lot of bugs and security issues. Following security issues are being addressed by this release : - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898...
October 10, 2017—KB4042895 (OS Build 10240.17643)
None None...
October 17, 2017—KB4041686 (Preview of Monthly Rollup)
None None...
October 17, 2017—KB4041685 (Preview of Monthly Rollup)
None None...
October 17, 2017—KB4035176 Improvements and Fixes to Universal C Runtime in Windows
None None...
[SECURITY] Fedora 27 Update: pkgconf-1.3.9-1.fc27
pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is similar to pkg-config from freedesktop.org and handles .pc files in a similar manner as pkg-config...
Apple Memory Corruption Vulnerability (CNVD-2017-32723)
Apple Xcode is a set of integrated development environments IDEs provided by Apple to developers for Mac OS X and iOS applications. ld64 is one of the linker components. A security vulnerability exists in the ld64 component in versions of Apple Xcode prior to 9. A remote attacker can exploit this...
Apple Memory Corruption Vulnerability (CNVD-2017-32725)
Apple Xcode is a set of integrated development environments IDEs provided by Apple to developers for Mac OS X and iOS applications. ld64 is one of the linker components. A security vulnerability exists in the ld64 component in versions of Apple Xcode prior to 9. A remote attacker can exploit this...
Apple Xcode mach-o file handling memory corruption vulnerability
Apple Xcode is a set of integrated development environments IDEs provided by Apple to developers for Mac OS X and iOS applications. ld64 is one of the linker components. A security vulnerability exists in the ld64 component in versions of Apple Xcode prior to 9. A remote attacker can exploit this...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
The vulnerability of the NetBSD operating system, which allows a hacker to execute arbitrary code
The vulnerability of the NetBSD operating system arises from the operation of the ld.so command outside the buffer on the stack, when the ASRL function is enabled. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
kernel: Incorrectly mapped contents of PIE executable
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...
