Skip to content
OpenAdvisories

Package · Debian

glibc

173 known vulnerabilities.

173 results · Feed

  • Unscored —

    DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earl…

  • Unscored —

    The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse fil…

  • Unscored —

    The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name S…

  • Unscored —
    CVE-2015-0235 Public exploit EPSS 95%

    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,…

  • Unscored —

    iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of ser…

  • Unscored —

    GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds re…

  • Unscored —

    The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-depen…

  • Unscored —

    The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with t…

  • Unscored —
    CVE-2014-5119 Public exploit EPSS 17%

    Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dep…

  • Unscored —

    Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent …

  • Unscored —

    The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions do…

  • Unscored —

    The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not …

  • Unscored —

    The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not …

  • Unscored —

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or l…

  • Unscored —

    sysdeps/posix/readdir_r.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allows context-dependent attackers…

  • Unscored —

    Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-…

  • Unscored —

    pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which all…

  • Unscored —

    Stack-based buffer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows con…

  • Unscored —
    CVE-2012-4412 Public exploit EPSS 18%

    Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-depend…

  • Unscored —
    CVE-2013-4788 Public exploit EPSS 11%

    The PTR_MANGLE implementation in the GNU C Library (aka glibc or libc6) 2.4, 2.17, and earlier, and Embedded GLIBC (EGL…

  • Unscored —
    CVE-2009-5029 Public exploit

    Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denia…

  • Unscored —

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or l…

  • Unscored —

    Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2…

  • Unscored —
    CVE-2012-3480 Public exploit

    Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related fun…

  • Unscored —

    locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, whi…

  • Unscored —

    The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for f…

  • Unscored —

    Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent…

  • Unscored —
    CVE-2011-1071 Public exploit EPSS 14%

    The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to e…

  • Unscored —

    ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse…

  • Unscored —

    The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial o…

  • Unscored —
    CVE-2010-4051 Public exploit EPSS 40%

    The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows …

  • Unscored —
    CVE-2010-4052 Public exploit EPSS 51%

    Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3,…

  • Unscored —
    CVE-2010-3856 Public exploit EPSS 12%

    ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use…

  • Unscored —
    CVE-2010-3847 Public exploit EPSS 10%

    elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pr…

  • Unscored —

    The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmo…

  • Unscored —

    Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka …

  • Unscored —

    Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library …

  • Unscored —
    CVE-2009-4880 Public exploit EPSS 11%

    Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier a…

  • Unscored —

    nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information…

  • Unscored —
    CVE-2008-1391 Public exploit EPSS 19%

    Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platform…