Lucene search
K

6 matches found

Veracode
Veracode
added 2022/07/22 12:16 p.m.27 views

Directory Traversal

tzinfo is vulnerable to Directory Traversal. Whilte Time zone files are loaded with require on demand, it fails to properly validate the time zone identifiers with correct regular expressions, causing a new line character in the identifier. Therefore, an attacker can use TZInfo::Timezone.get to...

8.1CVSS7.9AI score0.03833EPSS
Exploits1References9Affected Software4
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:0 a.m.34 views

Amazon Linux AMI : glibc (ALAS-2012-39)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...

6.8CVSS8.8AI score0.02765EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.31 views

Scientific Linux Security Update : glibc on SL4.x i386/x86_64 (20120213)

The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly. An integer overflow flaw, leading to a heap-based buffer...

7.2CVSS7.8AI score0.06775EPSS
Exploits6References9
OpenVAS
OpenVAS
added 2012/07/30 12:0 a.m.49 views

CentOS Update for glibc CESA-2012:0125 centos4

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.2CVSS6.8AI score0.00117EPSS
Exploits2References2
Amazon
Amazon
added 2012/02/02 12:0 a.m.40 views

Medium: glibc

Issue Overview: An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute...

6.8CVSS9.8AI score0.02765EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2012/01/24 9:5 p.m.41 views

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

6.8CVSS7.5AI score0.02765EPSS
Exploits1References4
Rows per page
Query Builder