libraw:libraw_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4773148208791552 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4949555064995840 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

GO-2020-0040 Uncontrolled Resource Consumption in github.com/shiyanhui/dht

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6308396152258560 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Mozi Botnet Accounts for Majority of IoT Traffic

The Mozi botnet, a peer-2-peer P2P malware known previously for taking over Netgear, D-Link and Huawei routers, has swollen in size to account for 90 percent of observed traffic flowing to and from all internet of things IoT devices, according to researchers. IBM X-Force noticed Mozi’s spike with...

Remote Memory Disclosure in bittorrent-dht

Versions of bittorrent-dht prior to 5.1.3 are affected by a remote memory disclosure vulnerability. This vulnerability allows an attacker to send a specific series of of messages to a listening peer and get it to reveal internal memory. There are two mitigating factors here, that slightly reduce...

GHSA-77G4-36JP-5V3M Remote Memory Disclosure in bittorrent-dht

Versions of bittorrent-dht prior to 5.1.3 are affected by a remote memory disclosure vulnerability. This vulnerability allows an attacker to send a specific series of of messages to a listening peer and get it to reveal internal memory. There are two mitigating factors here, that slightly reduce...

OSV-2020-1519 Index-out-of-bounds in DHT::hide_hots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23837 Crash type: Index-out-of-bounds Crash state: DHT::hidehots LibRaw::dhtinterpolate LibRaw::dcrawprocess...

OSV-2020-1417 Index-out-of-bounds in DHT::get_hv_rbg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23870 Crash type: Index-out-of-bounds Crash state: DHT::gethvrbg DHT::makehvdline DHT::makehvdirs...

PT-2020-21863

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the involvement of specific functions: DHT::get hv rbg,...

PT-2020-21886

Name of the Vulnerable Software and Affected Versions LibRaw affected versions not specified Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the DHT::hide hots function, LibRaw::dht interpolate function, and LibRaw::dcraw process functio...

libraw:libraw_raf_fuzzer: Index-out-of-bounds in DHT::hide_hots

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6229491834945536 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

HAProxy hpack_dht_insert Buffer Overflow

The vulnerability of the hpackdhtinsert function in the HAProxy networking software library is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failure...

CVE-2020-11100

In hpackdhtinsert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap via a crafted HTTP/2 request, possibly causing remote code execution...

PT-2020-2138

Name of the Vulnerable Software and Affected Versions HAProxy versions 1.8 through 2.1.4 Description The issue is related to the hpack dht insert function in the HPACK decoder, which can be exploited by a remote attacker via a crafted HTTP/2 request. This could lead to writing arbitrary bytes...

Denial Of Service (DoS)

bittorrent-dht is vulnerable to denial of service DOS attacks. The vulnerability exists as it does not restrict to run one ping at the time, leading to an infinite asnyc ping recursion and an application crash when a malicious user sends a large number of pings simultaneously without disregarding...

bittorrent-dht Remote Memory Disclosure Vulnerability

bittorrent-dht is a Node.js implementation of the BitTorrent DHT protocol. A security vulnerability exists in bittorrent-dht versions prior to 5.1.3. An attacker can exploit the vulnerability to disclose internal memory by sending a specific series of messages...

CVE-2016-10519

A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory...

CVE-2016-10519

A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory...

CVE-2016-10519

A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory...