agentprime: the-gnu-c-library-glibc

agentprime: the-gnu-c-library-glibcEvery new CVE for the-gnu-c-library-glibc.https://agentprime.io/CVE-2026-122054: BIG-HKSCS decoding hang on crafted inputhttps://agentprime.io/advisories/CVE-2026-122054/https://agentprime.io/advisories/CVE-2026-122054/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 17:17:38 GMTCVECVE-2026-84243: gettext: Directory traversal via the LANGUAGE environment variablehttps://agentprime.io/advisories/CVE-2026-84243/https://agentprime.io/advisories/CVE-2026-84243/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:43:35 GMTCVECVE-2026-97399: One-byte overread in strncasecmp on Power8https://agentprime.io/advisories/CVE-2026-97399/https://agentprime.io/advisories/CVE-2026-97399/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 15:21:02 GMTCVECVE-2026-95818: AT_SECURE program buffer overflow via $ORIGIN processinghttps://agentprime.io/advisories/CVE-2026-95818/https://agentprime.io/advisories/CVE-2026-95818/CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 16:50:07 GMTCVECVE-2026-86805: AT_SECURE programs may load attacker-controlled code via $ORIGINhttps://agentprime.io/advisories/CVE-2026-86805/https://agentprime.io/advisories/CVE-2026-86805/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 15:55:17 GMTCVECVE-2026-8674: Assertion failure in the DNS stub resolver with a long search domainhttps://agentprime.io/advisories/CVE-2026-8674/https://agentprime.io/advisories/CVE-2026-8674/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 16:54:27 GMTCVECVE-2026-80489: EUC_JISX0213 decoding may hang on crafted inputhttps://agentprime.io/advisories/CVE-2026-80489/https://agentprime.io/advisories/CVE-2026-80489/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 10:51:59 GMTCVECVE-2026-77117: SHIFT_JISX0213 decoding may hang on crafted inputhttps://agentprime.io/advisories/CVE-2026-77117/https://agentprime.io/advisories/CVE-2026-77117/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 10:48:56 GMTCVECVE-2026-19542: Stack-based out-of-bounds write in tdelete during tree rebalancinghttps://agentprime.io/advisories/CVE-2026-19542/https://agentprime.io/advisories/CVE-2026-19542/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 17:18:09 GMTCVECVE-2026-19499: Buffer overflow in strfmon and strfmon_l right-justification paddinghttps://agentprime.io/advisories/CVE-2026-19499/https://agentprime.io/advisories/CVE-2026-19499/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 17:11:12 GMTCVECVE-2026-89092: Stack overflow in nscd due to unbounded alloca usehttps://agentprime.io/advisories/CVE-2026-89092/https://agentprime.io/advisories/CVE-2026-89092/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 01:23:01 GMTCVECVE-2026-18374: Out-of-bounds write in The GNU C Library glibchttps://agentprime.io/advisories/CVE-2026-18374/https://agentprime.io/advisories/CVE-2026-18374/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 19:20:40 GMTCVECVE-2026-6791: Potential stack-based buffer clash during tilde expansion in wordexphttps://agentprime.io/advisories/CVE-2026-6791/https://agentprime.io/advisories/CVE-2026-6791/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:41:25 GMTCVECVE-2026-6238: Buffer overread in ns_printrrf with corrupted RDATA fieldhttps://agentprime.io/advisories/CVE-2026-6238/https://agentprime.io/advisories/CVE-2026-6238/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 16:43:08 GMTCVECVE-2026-5435: Potential buffer overflow in ns_sprintrrf TSIG handling pathhttps://agentprime.io/advisories/CVE-2026-5435/https://agentprime.io/advisories/CVE-2026-5435/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 11:58:54 GMTCVECVE-2026-5450: scanf %mc off-by-one heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-5450/https://agentprime.io/advisories/CVE-2026-5450/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 20:55:41 GMTCVEcriticalCVE-2026-5928: Potential buffer under-read in ungetwchttps://agentprime.io/advisories/CVE-2026-5928/https://agentprime.io/advisories/CVE-2026-5928/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 20:37:31 GMTCVECVE-2026-4046: iconv crash due to assertion failure with untrusted inputhttps://agentprime.io/advisories/CVE-2026-4046/https://agentprime.io/advisories/CVE-2026-4046/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 17:16:11 GMTCVECVE-2026-4438: gethostbyaddr and gethostbyaddr_r return invalid DNS hostnameshttps://agentprime.io/advisories/CVE-2026-4438/https://agentprime.io/advisories/CVE-2026-4438/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 19:59:06 GMTCVECVE-2026-4437: gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responsehttps://agentprime.io/advisories/CVE-2026-4437/https://agentprime.io/advisories/CVE-2026-4437/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 19:59:00 GMTCVECVE-2026-3904: Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on in…https://agentprime.io/advisories/CVE-2026-3904/https://agentprime.io/advisories/CVE-2026-3904/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 13:19:09 GMTCVECVE-2025-15281: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memoryhttps://agentprime.io/advisories/CVE-2025-15281/https://agentprime.io/advisories/CVE-2025-15281/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 13:22:46 GMTCVECVE-2026-0915: getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovlerhttps://agentprime.io/advisories/CVE-2026-0915/https://agentprime.io/advisories/CVE-2026-0915/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Jan 2026 22:08:41 GMTCVECVE-2026-0861: Integer overflow in memalign leads to heap corruptionhttps://agentprime.io/advisories/CVE-2026-0861/https://agentprime.io/advisories/CVE-2026-0861/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Jan 2026 21:01:11 GMTCVECVE-2025-8058: Double free in The GNU C Library glibchttps://agentprime.io/advisories/CVE-2025-8058/https://agentprime.io/advisories/CVE-2025-8058/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Jul 2025 19:57:17 GMTCVECVE-2025-5745: The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registe…https://agentprime.io/advisories/CVE-2025-5745/https://agentprime.io/advisories/CVE-2025-5745/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Jun 2025 19:20:23 GMTCVECVE-2025-5702: The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those register…https://agentprime.io/advisories/CVE-2025-5702/https://agentprime.io/advisories/CVE-2025-5702/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Jun 2025 18:23:57 GMTCVECVE-2025-4802: Untrusted search path in The GNU C Library glibchttps://agentprime.io/advisories/CVE-2025-4802/https://agentprime.io/advisories/CVE-2025-4802/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 May 2025 19:32:50 GMTCVECVE-2025-0395: Incorrect buffer size calculation in The GNU C Library glibchttps://agentprime.io/advisories/CVE-2025-0395/https://agentprime.io/advisories/CVE-2025-0395/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jan 2025 13:11:30 GMTCVECVE-2024-33602: nscd: netgroup cache assumes NSS callback uses in-buffer stringshttps://agentprime.io/advisories/CVE-2024-33602/https://agentprime.io/advisories/CVE-2024-33602/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 May 2024 19:22:12 GMTCVECVE-2024-33601: nscd: netgroup cache may terminate daemon on memory allocation failurehttps://agentprime.io/advisories/CVE-2024-33601/https://agentprime.io/advisories/CVE-2024-33601/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 May 2024 19:22:07 GMTCVECVE-2024-33600: nscd: Null pointer crashes after notfound responsehttps://agentprime.io/advisories/CVE-2024-33600/https://agentprime.io/advisories/CVE-2024-33600/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 May 2024 19:22:02 GMTCVECVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cachehttps://agentprime.io/advisories/CVE-2024-33599/https://agentprime.io/advisories/CVE-2024-33599/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 May 2024 19:21:54 GMTCVECVE-2024-2961: Out-of-bounds write in The GNU C Library glibchttps://agentprime.io/advisories/CVE-2024-2961/https://agentprime.io/advisories/CVE-2024-2961/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.88 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 17:27:40 GMTCVEcritical