LibTIFF Heap Buffer Overflow (CVE-2018-18557)

A heap buffer overflow vulnerability exists in LibTIFF. The vulnerability is due to insufficient length checks while processing TIFF files. Successful exploitation could result in the execution of arbitrary code...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2019-27648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. WLAN in Android suffers from a buffer overflow vulnerability that arises from a program performing improper length detection. ...

Google Android WLAN suffers from an unspecified vulnerability (CNVD-2019-28609)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A security vulnerability exists in WLAN in Android, which stems from the program not performing length detection on values fro...

ImageMagick Denial of Service Vulnerability (CNVD-2019-12133)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in ImageMagick 7.0.8-11, which stems from the ReadPICTImage function in coders/pict.c and the ReadDCMImage function in...

Google Android buffer out-of-bounds read vulnerability (CNVD-2018-10042)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm SD 820A and other central processing unit CPU products of Qualcomm for different platforms. A buffer out-of-bounds read vulnerability exists in the Qualcomm...

The vulnerability of the Advantech WebAccess remote monitoring software lies in insufficient verification of the data length provided by the user. This allows a intruder to gain unauthorized access to the device and execute arbitrary code.

The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device and execute arbitrary code within the context of the process...

The vulnerability of the Android CAF-release operating system’s audio driver allows a hacker to execute arbitrary code.

The vulnerability of the Android CAF-release operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to continue executing code even if the check for valid length values fails and an error message is...

The vulnerability of the tdx.sys component, which is used to check the length of the operating system’s buffer, allows a hacker to exploit their privileges.

The vulnerability of the tdx.sys component, which is used to check the length of operating system Windows buffers, is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating locally, to increase their privileges...

Internet Bug Bounty: Certificate message OOB reads (CVE-2016-6306)

In OpenSSL 1.0.2 and earlier some missing message length checks can result in OOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical DoS risk but this has not been observed in practice on common platforms. The messages affected are client certificate, client certificate...

UBUNTU-CVE-2017-7746

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length...

DEBIAN-CVE-2017-7746

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

Huawei S3300 EFM Feature Oscillation Vulnerability

Huawei S3300 is a Huawei switch device. The Huawei S3300 suffers from an EFM Feature Shock vulnerability, which allows an attacker to construct malformed messages to be sent to the device due to the device's lack of consistency checking for a certain type of TLV, resulting in an EFM service shock...

mod_jk: Buffer overflow when concatenating virtual host name and URI

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

DEBIAN-CVE-2016-9376

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory exhaustion, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-openflowv5.c by ensuring that certain length values were sufficiently large...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

CVE-2016-6808

It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow...

Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL regression (USN-3087-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3087-2 advisory. USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update...