Lucene search
+L

101 matches found

Mageia
Mageia
•added 2023/03/01 9:14 p.m.•33 views

Updated pkgconf packages fix security vulnerability

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes. CVE-2023-24056...

5.5CVSS6.2AI score0.00565EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/02/14 12:00 a.m.•18 views

openSUSE 15 Security Update : pkgconf (openSUSE-SU-2023:0043-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0043-1 advisory. - In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. Fo...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References4
osv-opensuse
osv-opensuse
•added 2023/02/09 7:01 p.m.•6 views

OPENSUSE-SU-2023:0043-1 Security update for pkgconf

This update for pkgconf fixes the following issues: - CVE-2023-24056: FIxed variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c boo1207394...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2023/02/09 12:00 a.m.•7 views

Security update for pkgconf (moderate)

openSUSE Security Update: Security update for pkgconf Announcement ID: openSUSE-SU-2023:0043-1 Rating: moderate References: 1207394 Cross-References: CVE-2023-24056 CVSS scores: CVE-2023-24056 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-24056 SUSE: 5.5...

5.5CVSS6AI score0.00565EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2023/01/27 1:35 p.m.•87 views

CVE-2023-24056

A flaw was found in pkgconf, where a variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. This issue may lead to a buffer overflow, which can crash the software...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References4
NVD
NVD
•added 2023/01/22 4:15 a.m.•22 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5CVSS5.3AI score0.00565EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2023/01/22 4:15 a.m.•53 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References2
Prion
Prion
•added 2023/01/22 4:15 a.m.•20 views

Design/Logic Flaw

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

1.9CVSS5.2AI score0.00565EPSS
SaveExploits1References3Affected Software1
osv-ubuntu
osv-ubuntu
•added 2023/01/22 4:15 a.m.•14 views

UBUNTU-CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/22 12:00 a.m.•4 views

CVE-2023-24056: Out-of-bounds Write

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5CVSS6AI score0.00565EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2023/01/22 12:00 a.m.•28 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1
CVE
CVE
•added 2023/01/22 12:00 a.m.•599 views

CVE-2023-24056

CVE-2023-24056 affects pkgconf up to 1.9.3. The issue is a root cause in libpkgconf/tuple.c:pkgconf_tuple_parse where variable duplication can cause unbounded string expansion (e.g., a small .pc expanded to billions of bytes), leading to memory/resource exhaustion. IBM bulletins for Cloud Pak pro...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/01/22 12:00 a.m.•24 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

5.5AI score0.00565EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/01/22 12:00 a.m.•6 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

6.1AI score0.00565EPSS
SaveExploits1References3
Mend
Mend
•added 2023/01/22 12:00 a.m.•2 views

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

6.8CVSS0.00565EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2023/01/21 12:00 a.m.•10 views

pkgconf 安全漏洞

pkgconf is a program from pkgconf open source that helps configure compiler and linker flags for development libraries. A security vulnerability exists in pkgconf version 1.9.3 and earlier versions, which stems from variable duplication leading to unbounded string expansion...

5.5CVSS6.1AI score0.00565EPSS
SaveExploits1References6
myhack58
myhack58
•added 2016/07/08 12:00 a.m.•30 views

D-Links Wi-Fi Camera in the presence of a vulnerability will affect more than 1 2 0 different products-vulnerability warning-the black bar safety net

! According to foreign media reports, security experts discovered a software plug-in, this component will be D-Links Wi-Fi camera is exposed to a remote attack risk. In addition, making the current situation worse, in the company's products, there are about 1 2 0 more products are using this...

SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2012/07/12 12:00 a.m.•37 views

Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Quicktime.qts. T...

9.3CVSS5.4AI score0.04012EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
•added 2010/04/06 12:00 a.m.•46 views

CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates XOsoft Control Replication and High Availability Control Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

10CVSS4.8AI score0.16755EPSS
SaveExploits5References1
securityvulns
securityvulns
•added 2005/02/11 12:00 a.m.•53 views

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: IBM AIX netpmon Local Buffer Overflow Vulnerability

IBM AIX netpmon Local Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=197&type=vulnerabilities February 10, 2005 I. BACKGROUND The netpmon program is a setuid root application, installed by default under multiple versions of IBM AIX,...

1.3AI score
SaveExploits0
Rows per page
Query Builder