Lucene search
+L

31 matches found

Veracode
Veracode
added 2020/04/10 12:55 a.m.26 views

Denial Of Service (DoS)

glibc is vulnerable to denial of service. An integer overflow in posix/fnmatch.c allows an attacker to crash the application via a malicious long UTF8 string...

5CVSS4.5AI score0.02856EPSS
SaveExploits1References16Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/08/19 12:0 a.m.33 views

F5 Networks BIG-IP : glibc vulnerability (SOL09408132)

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

5.1CVSS6.3AI score0.14323EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2014/11/28 12:0 a.m.46 views

F5 Networks BIG-IP : GNU C Library vulnerability (SOL15885)

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a 'stack extension attack,' a related issue to...

10CVSS5.7AI score0.14323EPSS
SaveExploits5References5
Positive Technologies
Positive Technologies
added 2011/10/27 12:0 a.m.4 views

PT-2011-1193 · Openldap · Openldap

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions 2.4.26 and earlier Description: The issue is related to an off-by-one error in the UTF8StringNormalize function, which can be exploited by remote attackers to cause a denial of service slapd crash via a zero-length string...

6.8CVSS6.7AI score0.0327EPSS
SaveExploits0References14
OSV
OSV
added 2011/04/08 3:17 p.m.4 views

DEBIAN-CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

5CVSS7AI score0.02856EPSS
SaveExploits1References1
OSV
OSV
added 2011/04/08 3:17 p.m.10 views

CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

6.3AI score
SaveExploits0References15
Prion
Prion
added 2011/04/08 3:17 p.m.27 views

Design/Logic Flaw

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to...

5.1CVSS7.7AI score0.14323EPSS
SaveExploits5References25Affected Software1
CVE
CVE
added 2011/04/08 3:0 p.m.120 views

CVE-2011-1071

CVE-2011-1071 affects the GNU C Library (glibc) and Embedded GLIBC (EGLIBC) prior to 2.12.2, with an underlying flaw in fnmatch() that lets context-dependent attackers supply a long UTF-8 string to trigger arbitrary code execution or memory exhaustion (DoS). Affected components include glibc in m...

5.1CVSS9.2AI score0.14323EPSS
SaveExploits2References25Affected Software2
UbuntuCve
UbuntuCve
added 2011/04/08 12:0 a.m.61 views

CVE-2011-1071

The GNU C Library aka glibc or libc6 before 2.12.2 and Embedded GLIBC EGLIBC allow context-dependent attackers to execute arbitrary code or cause a denial of service memory consumption via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to...

5.1CVSS6.6AI score0.14323EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
added 2011/04/04 8:1 p.m.9 views

glibc: fnmatch() alloca()-based memory corruption flaw

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

5CVSS6.2AI score0.02856EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2007/11/10 12:0 a.m.21 views

Ubuntu 5.04 / 5.10 / 6.06 LTS / 6.10 : screen vulnerability (USN-370-1)

cstone and Rich Felker discovered a programming error in the UTF8 string handling code of 'screen' leading to a denial of service. If a crafted string was displayed within a screen session, screen would crash or possibly execute arbitrary code. Note that Tenable Network Security has extracted the...

2.6CVSS6AI score0.02169EPSS
SaveExploits1References2
Rows per page
Query Builder