CVE-2016-8859

CVE-2016-8859 affects TRE and musl libc. The TRE library experienced multiple integer overflows in its regex/memory-handling paths, enabling memory corruption and an out-of-bounds write when processing large numbers of states or tags. Public advisories document this issue across multiple distribu...

CVE-2016-8859

Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of 1 states or 2 tags, which triggers an out-of-bounds write...

musl libc 'tre_tnfa_run_parallel()' function integer overflow vulnerability

musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. An integer overflow vulnerability exists in the musl libc 'tretnfarunparallel' function. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A...

Fedora 23 : webkitgtk4-2.10.9-1.fc23 (2016-7eb48a78dc)

This update together with the previous release brings the following fixes Security fixes: CVE-2016-1726 Limit the number of tiles according to the visible area. This was causing a huge memory consumption with some websites. Fix rendering of form controls and scrollbars with GTK+ = 3.19. Fix HTTP...

musl libc 'inet_pton.c' stack buffer overflow vulnerability

musl libc is a C standard library used in Linux kernel-based embedded systems and mobile devices. A stack buffer overflow vulnerability exists in musl libc, which could be exploited by a remote attacker to cause a denial-of-service attack by crashing an application that links to this library...

musl: arbitrary code execution

A stack-based buffer overflow has been found in musl libc's ipv6 address literal parsing code. Programs which call the inetpton or getaddrinfo function with AFINET6 or AFUNSPEC and untrusted address strings are affected. Successful exploitation yields control of the return address. Having enabled...

[musl] Security advisory for musl libc - remote stack-based buffer overflow in DNS response parsing [CVE-2014-3484]

A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc. if one of the...

musl-libc buffer overflow

Buffer overflow on DNS response parsing...