libplist:bplist_fuzzer: Heap-buffer-overflow in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5529817627033600 Project: libplist Fuzzing Engine: libFuzzer Fuzz Target: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

EUVD-2015-1093

Malware in sbrugna...

EUVD-2017-14913

Malware in sbrugna...

EUVD-2017-15494

Malware in sbrugna...

EUVD-2017-14912

Malware in sbrugna...

EUVD-2017-14911

Malware in sbrugna...

libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

...

The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service

...

The plist_free_data function libplist allows attackers to cause a denial of service

...

libplist:bplist_fuzzer: Crash in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5647409188503552 Project: libplist Fuzzing Engine: libFuzzer Fuzz Target: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libplist:bplist_fuzzer: Segv on unknown address in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5050083860348928 Project: libplist Fuzzing Engine: afl Fuzz Target: bplistfuzzer Job Type: aflasanlibplist Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

Linux Distros Unpatched Vulnerability : CVE-2017-5209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a...

CVE-2017-5835 affecting package libplist 2.1.0-4

CVE-2017-5835 affecting package libplist 2.1.0-4. No patch is available currently...

CVE-2017-5836 affecting package libplist 2.1.0-4

CVE-2017-5836 affecting package libplist 2.1.0-4. No patch is available currently...

CVE-2017-5834 affecting package libplist 2.1.0-4

CVE-2017-5834 affecting package libplist 2.1.0-4. No patch is available currently...

libplist: OOB access in plist_from_memory

Recording https://github.com/libimobiledevice/libplist/issues/244 here for historical purposes...

OPENSUSE-SU-2024:10970-1 libplist++-2_0-3-2.2.0-1.6 on GA media

These are all security issues fixed in the libplist++-20-3-2.2.0-1.6 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : libplist (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libplist: Out-of-bounds heap buffer read in plistutil CVE-2017-5545 - The parsedictnode function in...

RHEL 7 : libplist (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libplist: Out-of-bounds heap buffer read in plistutil CVE-2017-5545 - The parsedictnode function in...

RHEL 6 : libplist (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libplist: Out-of-bounds heap buffer read in plistutil CVE-2017-5545 - The parsedictnode function in...