glibc-devel vulnerabilities (TuxCare)
40 vulnerabilities.
glibc-develTuxCareSHIFT_JISX0213 decoding may hang on crafted input5.9 Mediumglibc-develTuxCareStack-based out-of-bounds write in tdelete during tree rebalancing5.6 Mediumglibc-develTuxCarewordexp with WRDE_APPEND can return or use invalid memory2.1 Lowglibc-develTuxCareBuffer overread in ns_printrrf with corrupted RDATA field6.5 Mediumglibc-develTuxCarePotential buffer overflow in ns_sprintrrf TSIG handling path7.3 Highglibc-develTuxCarescanf %mc off-by-one heap buffer overflow9.8 Criticalglibc-develTuxCarePotential buffer under-read in ungetwc7.5 Highglibc-develTuxCareiconv crash due to assertion failure with untrusted input7.5 Highglibc-develTuxCaregethostbyaddr and gethostbyaddr_r return invalid DNS hostnames5.4 Mediumglibc-develTuxCaregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response7.5 Highglibc-develTuxCarewordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory7.5 Highglibc-develTuxCaregetnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler7.5 Highglibc-develTuxCareInteger overflow in memalign leads to heap corruption8.4 Highglibc-develTuxCareThe regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free...5.9 Mediumglibc-develTuxCareUntrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to...7.8 Highglibc-develTuxCareWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate...6.2 Mediumglibc-develTuxCarenscd: netgroup cache assumes NSS callback uses in-buffer strings7.4 Highglibc-develTuxCarenscd: netgroup cache may terminate daemon on memory allocation failure7.3 Highglibc-develTuxCarenscd: Null pointer crashes after notfound response5.9 Mediumglibc-develTuxCarenscd: Stack-based buffer overflow in netgroup cache8.1 Highglibc-develTuxCareThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer...7.3 Highglibc-develTuxCareGlibc: buffer overflow in ld.so leading to privilege escalation7.8 Highglibc-develTuxCareGlibc: potential use-after-free in getaddrinfo()5.9 Mediumglibc-develTuxCareGlibc: potential use-after-free in gaih_inet()5.9 Mediumglibc-develTuxCareA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...7.8 Highglibc-develTuxCareThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka...9.8 Criticalglibc-develTuxCareThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ...9.8 Criticalglibc-develTuxCareIn iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force...7.5 Highglibc-develTuxCareUpdate of nscd, glibc-headers, glibc, glibc-utils, glibc-static, glibc-static, glibc-devel, glibc-devel, glibc, glibc-commonNo scoreglibc-develTuxCareIn librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c...7.5 Highglibc-develTuxCareThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...9.1 Criticalglibc-develTuxCareThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...9.8 Criticalglibc-develTuxCareThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...2.5 Lowglibc-develTuxCareThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...7.5 Highglibc-develTuxCareA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...7.0 Highglibc-develTuxCareIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...9.8 Criticalglibc-develTuxCareIn the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname...7.5 Highglibc-develTuxCarestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...9.8 Criticalglibc-develTuxCareAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...9.8 Criticalglibc-develTuxCareIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...7.8 High