The GNU C Library glibc.

BIG-HKSCS decoding hang on crafted input

• The GNU C Library glibc
• Denial of service

gettext: Directory traversal via the LANGUAGE environment variable

• The GNU C Library glibc
• Path traversal

One-byte overread in strncasecmp on Power8

• The GNU C Library glibc
• CWE-126

AT_SECURE program buffer overflow via $ORIGIN processing

• The GNU C Library glibc
• Memory corruption

AT_SECURE programs may load attacker-controlled code via $ORIGIN

• The GNU C Library glibc
• Race condition

Assertion failure in the DNS stub resolver with a long search domain

• The GNU C Library glibc
• Denial of service

EUC_JISX0213 decoding may hang on crafted input

• The GNU C Library glibc
• Denial of service

SHIFT_JISX0213 decoding may hang on crafted input

• The GNU C Library glibc
• Denial of service

Stack-based out-of-bounds write in tdelete during tree rebalancing

• The GNU C Library glibc
• Memory corruption

Buffer overflow in strfmon and strfmon_l right-justification padding

• The GNU C Library glibc
• Memory corruption

Stack overflow in nscd due to unbounded alloca use

• The GNU C Library glibc
• Denial of service

Out-of-bounds write in The GNU C Library glibc

• The GNU C Library glibc
• Memory corruption

Potential stack-based buffer clash during tilde expansion in wordexp

• The GNU C Library glibc
• Memory corruption

Buffer overread in ns_printrrf with corrupted RDATA field

• The GNU C Library glibc
• CWE-126

Potential buffer overflow in ns_sprintrrf TSIG handling path

• The GNU C Library glibc
• Memory corruption

scanf %mc off-by-one heap buffer overflow

• The GNU C Library glibc
• Memory corruption

Potential buffer under-read in ungetwc

• The GNU C Library glibc
• CWE-127

iconv crash due to assertion failure with untrusted input

• The GNU C Library glibc
• Denial of service

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

• The GNU C Library glibc
• Command injection
• CWE-20

gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

• The GNU C Library glibc
• Memory corruption

Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on in…

• The GNU C Library glibc
• CWE-366

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

• The GNU C Library glibc
• Memory corruption

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

• The GNU C Library glibc
• Memory corruption

Integer overflow in memalign leads to heap corruption

• The GNU C Library glibc
• Memory corruption

Double free in The GNU C Library glibc

• The GNU C Library glibc
• Memory corruption

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registe…

• The GNU C Library glibc
• CWE-665

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those register…

• The GNU C Library glibc
• CWE-665

Untrusted search path in The GNU C Library glibc

• The GNU C Library glibc
• CWE-426

Incorrect buffer size calculation in The GNU C Library glibc

• The GNU C Library glibc
• Memory corruption

nscd: netgroup cache assumes NSS callback uses in-buffer strings

• The GNU C Library glibc
• CWE-466

nscd: netgroup cache may terminate daemon on memory allocation failure

• The GNU C Library glibc
• Denial of service

nscd: Null pointer crashes after notfound response

• The GNU C Library glibc
• Memory corruption

nscd: Stack-based buffer overflow in netgroup cache

• The GNU C Library glibc
• Memory corruption

Out-of-bounds write in The GNU C Library glibc

• The GNU C Library glibc
• Memory corruption