EUVD-2013-2020

Malware in sbrugna...

EUVD-2025-5270

Malicious code in bioql PyPI...

EUVD-2023-48028

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-17937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to...

DEBIAN-CVE-2024-57979

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit from gpsd when rebooting: pps pps1: removed ------------ cut here ------------ kobject: 'null' 00000000db4bec24: is not...

CVE-2024-57979

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit from gpsd when rebooting: pps pps1: removed ------------ cut here ------------ kobject: 'null' 00000000db4bec24: is not...

CVE-2024-57979

The CVE-2024-57979 entry is supported by connected documents detailing a Linux kernel use-after-free in pps during device teardown. The root cause is described as pps_device_destruct() freeing the pps_device immediately after cdev_del(), while fops from previously opened cdevs may still be callab...

CVE-2024-57979 pps: Fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit from gpsd when rebooting: pps pps1: removed ------------ cut here ------------ kobject: 'null' 00000000db4bec24: is not...

CVE-2024-57979 pps: Fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit from gpsd when rebooting: pps pps1: removed ------------ cut here ------------ kobject: 'null' 00000000db4bec24: is not...

CVE-2024-57979

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sysexit from gpsd when rebooting: pps pps1: removed ------------ cut here ------------ kobject: 'null' 00000000db4bec24: is not...

gpsd: buffer overflow in sirf_msg_ppstime

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include "gpsdconfig.h" // Include gpsdconfig.h first include "/src/gpsd/gpsd-3.25.1dev/include/gpsd.h" define FUZZBUFFERSIZE 1024 int LLVMFuzzerTestOneInputconst uint8t data, sizet size...

PT-2026-1057

Name of the Vulnerable Software and Affected Versions gpsd versions prior to commit dc966aa Description The software contains a heap-based out-of-bounds write issue in the drivers/driver nmea2000.c file. The hnd 129540 function, responsible for processing NMEA2000 PGN 129540 packets GNSS Satellit...

gpsd:FuzzPacket: Use-of-uninitialized-value in packet_parse

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=6363399934509056 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzPacket Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: packetpar...

gpsd:FuzzPacket: Use-of-uninitialized-value in packet_parse

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=4885185915584512 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzPacket Job Type: libfuzzermsangpsd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: packetpar...

Remote code execution vulnerabilities found in Buildroot, Foxit PDF Reader

Cisco Talos has disclosed 10 vulnerabilities over the past two weeks, including nine that exist in a popular online PDF reader that offers a browser plugin. Attackers could exploit these vulnerabilities in the Foxit PDF Reader to carry out a variety of malicious actions, but most notably could ga...

CVE-2023-43628

An integer overflow vulnerability was found in gpsd. A specially crafted network packet can lead to an integer overflow and cause memory corruption...

CVE-2023-43628

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-43628

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...

Integer overflow

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2023-43628

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability...