Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU C Library 数字错误漏洞
Vulnerability Description
GNU C Library（glibc，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU C Library 2.14及其他版本存在数字错误漏洞。该漏洞源于 stdio-common/vfprintf.c中的 vfprintf 函数中存在数字错误漏洞。攻击者可通过大量的参数利用该漏洞绕过FORTIFY_SOURCE保护机制，实施格式化字符串攻击，并写入任意内存。
CVSS Information
N/A
Vulnerability Type
N/A