PT-2023-35870 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the NetworkInterface::dissectPacket function, as...

CVE-2023-34488

CVE-2023-34488 affects NanoMQ 0.17.5, where a one-byte heap-based buffer over-read occurs in the conn_handler function of mqtt_parser.c while processing malformed messages. The issue is described across multiple sources as a heap-buffer-overflow vulnerability, with Impact/Summary indicating high ...

PT-2024-20949 · Imlib2 +1 · Imlib2 +1

Name of the Vulnerable Software and Affected Versions: imlib2 version 1.9.1 Description: An issue in the imlib load image with error return function allows attackers to cause a heap buffer overflow via parsing a crafted image. Recommendations: For imlib2 version 1.9.1, consider disabling the imli...

CVE-2023-34488

NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the connhandler function of mqttparser.c when it processes malformed messages...

OESA-2023-1335 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: OpenPrinting CUPS is an open source printing system. In versions 2.4.2...

OSV-2023-471 Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59695 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5FSsinfoserializenodecb H5SLiterate H5FScachesinfoserialize...

PT-2023-35865 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a WRITE 1 heap-buffer-overflow. Technical details about the issue include the involvement of...

PT-2023-35866 · Git +1 · Freerdp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash was reported, with the crash state involving TestFuzzCommonAssistanceParseFileBuffer.c. No information is available...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2144)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33660

CVE-2023-33660 affects NanoMQ 0.17.2 and is caused by a heap buffer overflow in the function copyn_str() within mqtt_parser.c. The vulnerability can be triggered to cause a denial of service. Multiple connected sources corroborate the issue and specify the vulnerable component and version. Practi...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33658

CVE-2023-33658 affects NanoMQ 0.17.2. Root cause: heap buffer overflow in function nni_msg_get_pub_pid() inside message.c, leading to potential denial of service. No official patch details are provided in the documents; some sources suggest a temporary workaround to disable the affected function ...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

OSV-2023-462 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet Flow::processPacket...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2074)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2023-2126)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For user...