1053 matches found
Denial Of Service (DoS)
Ruby is vulnerable to denial of serviceDoS attacks. An attacker could provide a specially crafted string to the OpenSSL::ASN1 decode function to cause the target interpreter to crash...
EulerOS Virtualization for ARM 64 3.0.1.0 : ruby (EulerOS-SA-2019-1407)
According to the versions of the ruby packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A...
libressl/asn1: Crash in asn1_item_print_ctx
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5653710820081664 Project: libressl Fuzzer: afllibresslasn1 Fuzz target binary: asn1 Job Type: aflasanlibressl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60a0018b0000 Cra...
libressl/asn1: Heap-buffer-overflow in asn1_item_ex_d2i
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5666378322804736 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libressl/asn1: Heap-buffer-overflow in c2i_ASN1_INTEGER
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5723457666416640 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libressl/asn1: Crash in asn1_item_print_ctx
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5665138134220800 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerubsanlibressl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
libressl/asn1: Heap-buffer-overflow in do_print_ex
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5685609458302976 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
picotls/fuzz-asn1: Heap-buffer-overflow in ptls_asn1_read_type
Project: https://github.com/h2o/picotls.git Detailed report: https://oss-fuzz.com/testcase?key=5687824386359296 Project: picotls Fuzzer: aflpicotlsfuzz-asn1 Fuzz target binary: fuzz-asn1 Job Type: aflasanpicotls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
picotls/fuzz-asn1: Crash in ptls_asn1_validation_recursive
Project: https://github.com/h2o/picotls.git Detailed report: https://oss-fuzz.com/testcase?key=5688525536624640 Project: picotls Fuzzer: libFuzzerpicotlsfuzz-asn1 Fuzz target binary: fuzz-asn1 Job Type: libfuzzerasanpicotls Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6190bebebf97...
libressl/asn1: Heap-buffer-overflow in ASN1_get_object
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5740695165337600 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
libressl/asn1: Crash in BN_bin2bn
Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5661545494740992 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
Wireshark Buffer Overflow Vulnerability (CNVD-2019-18502)
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A buffer overflow vulnerability exists in the ASN.1 BER and related parsers in Wireshark...
Linux kernel local elevation of privilege vulnerability (CNVD-2019-06183)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An out-of-bounds read/write vulnerability exists in Linux kernel versions prior to 4.20.12. The vulnerability stems...
openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service
Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...
openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service
Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...
PT-2019-17971 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A memory leak issue has been identified. The Memory malloc function in hal/memory/lib memory.c leaks memory when called from Asn1PrimitiveValue create in mms/asn1/asn1 ber primitive value.c. This issue i...
libIEC61850 Buffer Overflow Vulnerability
libIEC61850 is an open source library for IEC 61850. A heap buffer overflow vulnerability exists in the 'BerEncoderencodeOctetString' function in the mms/asn1/berencoder.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service or code execution...
Heap overflow
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
