Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Avaya Subscribe
Filtered by product Libsafe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0175 1 Avaya 1 Libsafe 2008-09-10 4.6 MEDIUM N/A
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
CVE-2002-0176 1 Avaya 1 Libsafe 2008-09-10 4.6 MEDIUM N/A
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
CVE-2005-1125 1 Avaya 1 Libsafe 2008-09-05 5.1 MEDIUM N/A
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.