SUSE CVE-2014-4043

The posixspawnfileactionsaddopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities...

PT-2021-11146

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions prior to 4.0 Description: An issue was discovered in Malwarebytes where a malicious application could perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC...

SUSE-SU-2020:0832-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary code execution bsc1167631. -...

Ubuntu 10.04 LTS : eglibc regression (USN-2306-2)

USN-2306-1 fixed vulnerabilities in the GNU C Library. On Ubuntu 10.04 LTS, the security update cause a regression in certain environments that use the Name Service Caching Daemon nscd, such as those configured for LDAP or MySQL authentication. In these environments, the nscd daemon may need to b...

PT-2014-5691

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.20 Description The issue is related to the posix spawn file actions addopen function in glibc, which does not properly copy its path argument as per the POSIX specification. This can be exploited by context-dependent...

PT-2013-4759

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.8.x Description The issue is related to the posix spawn system call in the XNU kernel, which does not properly validate data for file actions and port actions. This allows local users to cause a denial of service pani...

PT-2013-4754

Name of the Vulnerable Software and Affected Versions XNU kernel in Apple Mac OS X version 10.8.x Description The issue allows local users to bypass intended access restrictions. This is due to the posix spawn system call not preventing the use of certain flags for setuid and setgid programs. A...