CVE-2021-27645

CVE-2021-27645 affects the GNU C Library (glibc) nscd: a double-free in netgroupcache.c may crash the nameserver caching daemon and cause local Denial of Service. Public reports reference glibc versions 2.29–2.33 as affected, with remediation via security updates. Debian’s DLA-3152-1 (glibc 2.28-...

CVE-2004-0968

CVE-2004-0968 concerns glibc (catchsegv) and related scripts: in glibc 2.3.2 and earlier, local users could cause a symlink attack on temporary files and overwrite them. The issue is documented across multiple advisories (CAN-2004-0968; CAN-2004-1382; CVE-2004-1453) and modules referencing glibc ...

CVE-2013-2207

CVE-2013-2207: In the GNU C Library (glibc), pt_chown() can bypass security restrictions due to improper permission checks, allowing a local attacker to access other users’ pseudoterminals. The vulnerability affects glibc versions before 2.18. IBM advisories (FSM, IMM2, AMM) reference CVE-2013-22...

CVE-2004-1453

CVE-2004-1453 affects the GNU C Library (glibc). The issue arises when LD_DEBUG, LD_SHOW_AUXV, and LD_DYNAMIC_WEAK are not restricted for setuid programs, allowing a local attacker to obtain sensitive information (e.g., the program’s symbol list). This is a local information disclosure vulnerabil...

CVE-2004-1382

CVE-2004-1382 affects glibc 2.3.4 and earlier via the glibcbug script, enabling a local symlink attack to overwrite arbitrary files in temporary locations. The root cause is the insecure handling of temporary files by the glibcbug script, with published advisories (e.g., CAN-2004-1382 and related...