98 results · Feed
-
Medium 5.9
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequ…
-
Unscored —
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer o…
-
High 7.0
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was c…
-
Medium 5.1
An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specif…
-
High 8.1
An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Call…
-
Unscored —
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input…
-
Medium 5.4
GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst cas…
-
Unscored —
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack…
-
Unscored —
In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled…
-
Unscored —
In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which a…
-
Unscored —
In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly re…
-
Unscored —
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that…
-
Unscored —
The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, inco…
-
Unscored —
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname ar…
-
Unscored —
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc o…
-
Unscored —CVE-2017-1000408 Public exploit
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environm…
-
Unscored —CVE-2017-1000409 Public exploit
A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH enviro…
-
Unscored —
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before t…
-
Unscored —CVE-2017-16997 Public exploit
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIG…
-
Unscored —
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during une…
-
Unscored —
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow…
-
Unscored —
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could …
-
Unscored —
Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6…
-
Unscored —
The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will…
-
Unscored —
res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer derefere…
-
Unscored —CVE-2017-1000366 Public exploit
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causi…
-
Unscored —
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal b…
-
Unscored —
The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to c…
-
Unscored —
Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before …
-
Unscored —
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a den…
-
Unscored —
Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent…
-
Unscored —
The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in th…
-
Unscored —
The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible …
-
Unscored —
Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6)…
-
Unscored —
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc …
-
Unscored —
Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC i…
-
Unscored —
Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C Library (aka glibc) bef…
-
Unscored —
The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause…
-
Unscored —
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows contex…
-
Unscored —
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a de…