Lucene search
K

177 matches found

Debian CVE
Debian CVE
added 2022/08/25 11:32 p.m.25 views

CVE-2021-3020

Removed by vendor...

8.8CVSS8.6AI score0.00409EPSS
Exploits0
NVD
NVD
added 2022/08/24 4:15 p.m.21 views

CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

7.8CVSS0.00848EPSS
Exploits1References8
OSV
OSV
added 2022/08/24 4:15 p.m.29 views

CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

7.8CVSS8.3AI score0.00848EPSS
Exploits1References8
Prion
Prion
added 2022/08/24 4:15 p.m.26 views

Buffer overflow

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

4.3CVSS9AI score0.00848EPSS
Exploits1References8Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/04/25 12:0 a.m.48 views

EulerOS 2.0 SP8 : glibc (EulerOS-SA-2022-1565)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on...

9.8CVSS8.1AI score0.00848EPSS
Exploits3References5
Veracode
Veracode
added 2022/04/10 12:42 a.m.38 views

Buffer Overflow

glibc is vulnerable to buffer overflow. The vulnerability exists due to a memory corruption when the size of the buffer is exactly 1 which allows an attacker to control the input buffer and size passed to getcwd in a setuid program...

7.8CVSS3.9AI score0.00848EPSS
Exploits1References11Affected Software2
RedHat Linux
RedHat Linux
added 2022/03/15 10:26 a.m.3 views

glibc: Off-by-one buffer overflow/underflow in getcwd()

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

7.8CVSS7.3AI score0.00848EPSS
Exploits1References5
Mageia
Mageia
added 2022/02/08 4:27 p.m.53 views

Updated glibc packages fix security vulnerability

Updated glibc packages fix security vulnerability: An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to...

7.8CVSS1.9AI score0.00848EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/02/01 12:0 a.m.148 views

CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

7.8CVSS7.3AI score0.00848EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2022/01/11 5:24 p.m.48 views

CVE-2021-3999

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd in a setuid program could use this flaw to potentially execute...

7.8CVSS2.3AI score0.00848EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/03/24 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1676)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.2AI score0.00805EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.2AI score0.00805EPSS
Exploits0References2
0day.today
0day.today
added 2020/04/18 12:0 a.m.65 views

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow Vulnerability

A difficult to exploit stack-based buffer overflow in the DtCreateDtDirs function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier may allow local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges...

7.8CVSS0.6AI score0.00143EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:0 a.m.59 views

EulerOS 2.0 SP3 : glibc (EulerOS-SA-2020-1388)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by...

7.5CVSS6.8AI score0.02309EPSS
Exploits2References5
Veracode
Veracode
added 2020/04/10 12:55 a.m.36 views

Privilege Escalation

glibc is vulnerable to privilege escalation. A local user is able to gain privileges by creating a hard link in an arbitrary directory to a setuid program...

3.7CVSS2.4AI score0.00119EPSS
Exploits19References8Affected Software1
Veracode
Veracode
added 2020/04/10 12:47 a.m.25 views

Privilege Escalation

Pluggable Authentication Modules PAM is vulnerable to Privilege Escalation. The attack exists because pamnamespace.c in the pamnamespace module in Linux-PAM uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to...

6.9CVSS4.9AI score0.00053EPSS
Exploits0References13Affected Software1
NVD
NVD
added 2020/01/15 3:15 p.m.12 views

CVE-2015-7556

DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program...

7.8CVSS7.7AI score0.00234EPSS
Exploits3References2
Prion
Prion
added 2020/01/15 3:15 p.m.11 views

Design/Logic Flaw

DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program...

7.2CVSS7AI score0.00234EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2020/01/15 2:57 p.m.11 views

CVE-2015-7556

DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program...

7.7AI score0.00234EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2019/12/13 11:38 a.m.18 views

CVE-2017-8284

The disasinsn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as demonstrated...

7CVSS6.8AI score0.00108EPSS
Exploits0References3
Rows per page
Query Builder