https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:33:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03122 bdu:2021-03122 https://cve.radiocsirt.org/vuln/bdu:2021-03122 https://cve.radiocsirt.org/vuln/bell-cve-2020-1752 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-1752 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0453 certfr-2023-avi-0453 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0453 https://cve.radiocsirt.org/vuln/cnvd-2020-29730 cnvd-2020-29730 https://cve.radiocsirt.org/vuln/cnvd-2020-29730 https://cve.radiocsirt.org/vuln/euvd-2026-35646 EUVD-2026-35646 https://cve.radiocsirt.org/vuln/euvd-2026-35646 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1752 <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1752 https://cve.radiocsirt.org/vuln/ghsa-8x3m-4qgh-829r <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> https://cve.radiocsirt.org/vuln/ghsa-8x3m-4qgh-829r https://cve.radiocsirt.org/vuln/gsd-2020-1752 gsd-2020-1752 https://cve.radiocsirt.org/vuln/gsd-2020-1752 https://cve.radiocsirt.org/vuln/icsa-23-166-10 <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> https://cve.radiocsirt.org/vuln/icsa-23-166-10 https://cve.radiocsirt.org/vuln/msrc_cve-2020-1752 msrc_CVE-2020-1752 https://cve.radiocsirt.org/vuln/msrc_cve-2020-1752 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0467-1 <p>Security update for glibc</p> <p>Security update for glibc</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0467-1 https://cve.radiocsirt.org/vuln/suse-su-2020:0820-1 <p>Security update for glibc</p> <p>Security update for glibc</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0820-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1752 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:16.04:LTS: glibc, Ubuntu:18.04:LTS: glibc</p> <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:16.04:LTS: glibc, Ubuntu:18.04:LTS: glibc</p> <p>A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1752 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1748 <p>Ein lokaler Angreifer kann eine Schwachstelle in GNU libc ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in GNU libc ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1748