glibc vulnerabilities (Azure Linux)
43 vulnerabilities.
-
glibcAzure Linux gettext: Directory traversal via the LANGUAGE environment variable 7.0 High -
glibcAzure Linux One-byte overread in strncasecmp on Power8 3.7 Low -
glibcAzure Linux AT_SECURE program buffer overflow via $ORIGIN processing 3.6 Low -
glibcAzure Linux AT_SECURE programs may load attacker-controlled code via $ORIGIN 6.3 Medium -
glibcAzure Linux Assertion failure in the DNS stub resolver with a long search domain 5.3 Medium -
glibcAzure Linux Stack overflow in nscd due to unbounded alloca use 4.2 Medium -
glibcAzure Linux EUC_JISX0213 decoding may hang on crafted input 5.9 Medium -
glibcAzure Linux Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the ... 4.9 Medium -
glibcAzure Linux SHIFT_JISX0213 decoding may hang on crafted input 5.9 Medium -
glibcAzure Linux Buffer overflow in strfmon and strfmon_l right-justification padding 7.7 High -
glibcAzure Linux Stack-based out-of-bounds write in tdelete during tree rebalancing 5.6 Medium -
glibcAzure Linux wordexp with WRDE_APPEND can return or use invalid memory 2.1 Low -
glibcAzure Linux Potential stack-based buffer clash during tilde expansion in wordexp 6.6 Medium -
glibcAzure Linux Buffer overread in ns_printrrf with corrupted RDATA field 6.5 Medium -
glibcAzure Linux Potential buffer overflow in ns_sprintrrf TSIG handling path 7.3 High -
glibcAzure Linux scanf %mc off-by-one heap buffer overflow 9.8 Critical -
glibcAzure Linux Potential buffer under-read in ungetwc 7.5 High -
glibcAzure Linux iconv crash due to assertion failure with untrusted input 7.5 High -
glibcAzure Linux gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames 5.4 Medium -
glibcAzure Linux gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response 7.5 High -
glibcAzure Linux wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 7.5 High -
glibcAzure Linux getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler 7.5 High -
glibcAzure Linux Integer overflow in memalign leads to heap corruption 8.4 High -
glibcAzure Linux The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free... 5.9 Medium -
glibcAzure Linux Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to... 7.8 High -
glibcAzure Linux When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate... 6.2 Medium -
glibcAzure Linux nscd: netgroup cache assumes NSS callback uses in-buffer strings 7.4 High -
glibcAzure Linux nscd: netgroup cache may terminate daemon on memory allocation failure 7.3 High -
glibcAzure Linux nscd: Null pointer crashes after notfound response 5.9 Medium -
glibcAzure Linux nscd: Stack-based buffer overflow in netgroup cache 8.1 High -
glibcAzure Linux Glibc: integer overflow in __vsyslog_internal() 5.3 Medium -
glibcAzure Linux Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() 8.2 High -
glibcAzure Linux Glibc: heap-based buffer overflow in __vsyslog_internal() 8.4 High -
glibcAzure Linux Glibc: buffer overflow in ld.so leading to privilege escalation 7.8 High -
glibcAzure Linux Glibc: dos due to memory leak in getaddrinfo.c 7.5 High -
glibcAzure Linux Glibc: potential use-after-free in getaddrinfo() 5.9 Medium -
glibcAzure Linux Glibc: stack read overflow in getaddrinfo in no-aaaa mode 6.5 Medium -
glibcAzure Linux Glibc: potential use-after-free in gaih_inet() 5.9 Medium -
glibcAzure Linux A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,... 7.5 High -
glibcAzure Linux The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka... 9.8 Critical -
glibcAzure Linux The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ... 9.8 Critical -
glibcAzure Linux In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force... 7.5 High -
glibcAzure Linux In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c... 7.5 High