nss_db vulnerabilities (TuxCare)
30 vulnerabilities.
-
nss_dbTuxCare SHIFT_JISX0213 decoding may hang on crafted input 5.9 Medium -
nss_dbTuxCare Stack-based out-of-bounds write in tdelete during tree rebalancing 5.6 Medium -
nss_dbTuxCare wordexp with WRDE_APPEND can return or use invalid memory 2.1 Low -
nss_dbTuxCare Buffer overread in ns_printrrf with corrupted RDATA field 6.5 Medium -
nss_dbTuxCare Potential buffer overflow in ns_sprintrrf TSIG handling path 7.3 High -
nss_dbTuxCare scanf %mc off-by-one heap buffer overflow 9.8 Critical -
nss_dbTuxCare Potential buffer under-read in ungetwc 7.5 High -
nss_dbTuxCare iconv crash due to assertion failure with untrusted input 7.5 High -
nss_dbTuxCare gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames 5.4 Medium -
nss_dbTuxCare gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response 7.5 High -
nss_dbTuxCare wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 7.5 High -
nss_dbTuxCare getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler 7.5 High -
nss_dbTuxCare Integer overflow in memalign leads to heap corruption 8.4 High -
nss_dbTuxCare The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free... 5.9 Medium -
nss_dbTuxCare Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to... 7.8 High -
nss_dbTuxCare When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate... 6.2 Medium -
nss_dbTuxCare nscd: netgroup cache assumes NSS callback uses in-buffer strings 7.4 High -
nss_dbTuxCare nscd: netgroup cache may terminate daemon on memory allocation failure 7.3 High -
nss_dbTuxCare nscd: Null pointer crashes after notfound response 5.9 Medium -
nss_dbTuxCare nscd: Stack-based buffer overflow in netgroup cache 8.1 High -
nss_dbTuxCare The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... 7.3 High -
nss_dbTuxCare Glibc: buffer overflow in ld.so leading to privilege escalation 7.8 High -
nss_dbTuxCare Glibc: potential use-after-free in getaddrinfo() 5.9 Medium -
nss_dbTuxCare Glibc: potential use-after-free in gaih_inet() 5.9 Medium -
nss_dbTuxCare A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to... 7.8 High -
nss_dbTuxCare The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka... 9.8 Critical -
nss_dbTuxCare The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ... 9.8 Critical -
nss_dbTuxCare The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary... 9.1 Critical -
nss_dbTuxCare The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may... 9.8 Critical -
nss_dbTuxCare The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,... 2.5 Low