https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:28:02 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:5453 <p><strong>Affected:</strong> AlmaLinux:9: glibc, AlmaLinux:9: glibc-all-langpacks, AlmaLinux:9: glibc-benchtests, AlmaLinux:9: glibc-common, AlmaLinux:9: glibc-devel, AlmaLinux:9: glibc-doc, AlmaLinux:9: glibc-gconv-extra, AlmaLinux:9: glibc-headers, AlmaLinux:9: glibc-langpack-aa, AlmaLinux:9: glibc-langpack-af and 205 more</p> <p>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.</p> <p>Security Fix(es):</p> <p>* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911) * glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527) * glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806) * glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: glibc, AlmaLinux:9: glibc-all-langpacks, AlmaLinux:9: glibc-benchtests, AlmaLinux:9: glibc-common, AlmaLinux:9: glibc-devel, AlmaLinux:9: glibc-doc, AlmaLinux:9: glibc-gconv-extra, AlmaLinux:9: glibc-headers, AlmaLinux:9: glibc-langpack-aa, AlmaLinux:9: glibc-langpack-af and 205 more</p> <p>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.</p> <p>Security Fix(es):</p> <p>* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911) * glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527) * glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806) * glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:5453 https://cve.radiocsirt.org/vuln/bdu:2023-06332 bdu:2023-06332 https://cve.radiocsirt.org/vuln/bdu:2023-06332 https://cve.radiocsirt.org/vuln/bell-cve-2023-4527 <p><strong>Affected:</strong> Alpaquita:23: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:stream: glibc</p> <p><strong>Affected:</strong> Alpaquita:23: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:stream: glibc</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-4527 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0957 certfr-2023-avi-0957 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0957 https://cve.radiocsirt.org/vuln/euvd-2026-336238 EUVD-2026-336238 https://cve.radiocsirt.org/vuln/euvd-2026-336238 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4527 <p>A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.</p> <p>A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4527 https://cve.radiocsirt.org/vuln/ghsa-hmf7-f8gf-8f4p <p>A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.</p> <p>A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.</p> https://cve.radiocsirt.org/vuln/ghsa-hmf7-f8gf-8f4p https://cve.radiocsirt.org/vuln/gsd-2023-4527 gsd-2023-4527 https://cve.radiocsirt.org/vuln/gsd-2023-4527 https://cve.radiocsirt.org/vuln/icsa-23-166-10 <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> https://cve.radiocsirt.org/vuln/icsa-23-166-10 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4527 msrc_CVE-2023-4527 https://cve.radiocsirt.org/vuln/msrc_cve-2023-4527 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13273-1 <p>glibc-2.38-3.1 on GA media</p> <p>glibc-2.38-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13273-1 https://cve.radiocsirt.org/vuln/ssa-082556 <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> <p>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.</p> https://cve.radiocsirt.org/vuln/ssa-082556 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2384 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2384